Senior Analyst, Information Security and Governance

Abu Dhabi Telemedicine Centre; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

Abu Dhabi Telemedicine Centre is seeking a seasoned Information Security leader to drive the organization's security strategy and risk management program. You will design architectures, oversee incident response, and mentor security staff while ensuring regulatory compliance and alignment with business goals.

The role requires extensive experience in information security, risk assessment, and security governance, with strong communication skills to engage non-technical stakeholders and

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 5+ years of professional experience in Information Security.
• Experience in risk management, information security, security operations, and security reviews.
• Must have one of the following industry certifications: CISSP, CISM or CISA.
• Additional certifications such as CRISC or CCSP are highly desirable.
• Excellent communication skills with the ability to explain complex security issues to non-technical stakeholders.

Responsibilities

• Security Strategy Development: Lead the development and implementation of the organization's information security strategy and roadmap in alignment with business objectives.
• Advanced Risk Management: Perform in-depth risk assessments and vulnerability analyses to identify and mitigate complex security risks.
• Incident Management: Oversee the organization's incident response process and coordinate with external agencies when necessary.
• Security Architecture: Design and implement advanced security architectures and solutions for protection of information assets.
• Leadership & Mentoring: Provide guidance and mentorship to junior security staff.
• Compliance & Audit: Ensure compliance with security regulations and standards; lead security audits with external auditors.
• Third-Party Management: Evaluate and manage third-party security posture.
• Threat Intelligence: Lead threat intelligence efforts and stay ahead of emerging threats.
• Collaboration with Executives: Communicate security risks to CISO and executives.
• Continuous Improvement: Drive ongoing improvements in security practices.

Skills

Information security

Risk management

Security operations

Security reviews

Education

Bachelor's degree in Information Security

Job description

Overview

M42 delivers comprehensive healthcare services across the full continuum of care; from primary care to advanced specialty treatments. Leveraging cutting-edge health technologies and precision medicine, we ensure the highest standards of effectiveness, efficiency, and patient-centered outcomes. With a global presence spanning more than 480 facilities in 27 countries and a dedicated workforce of over 20,000 professionals, M42 is uniquely positioned to redefine the future of healthcare on a global scale.

Overview

M42 delivers comprehensive healthcare services across the full continuum of care; from primary care to advanced specialty treatments. Leveraging cutting-edge health technologies and precision medicine, we ensure the highest standards of effectiveness, efficiency, and patient-centered outcomes. With a global presence spanning more than 480 facilities in 27 countries and a dedicated workforce of over 20,000 professionals, M42 is uniquely positioned to redefine the future of healthcare on a global scale.

This role plays a critical role in leading the organization's security initiatives and ensuring the protection of all information assets. The role would also be responsible for designing advanced security solutions, managing complex security projects, and mentoring junior security staff. This position demands extensive experience in information security and a deep understanding of evolving cybersecurity threats.

Responsibilities

• Security Strategy Development: Lead the development and implementation of the organization's information security strategy and roadmap in alignment with business objectives.
• Advanced Risk Management: Perform in-depth risk assessments and vulnerability analyses to identify and mitigate complex security risks. Develop risk management strategies and frameworks.
• Incident Management: Oversee the organization's incident response process, including detection, analysis, containment, eradication, recovery, and post-incident review. Lead major incident investigations and coordinate with external agencies when necessary.
• Security Architecture: Design and implement advanced security architectures and solutions for the protection of the organization's information assets. Ensure that security is embedded in the design and deployment of IT systems.
• Leadership & Mentoring: Provide guidance and mentorship to junior security staff, fostering a culture of continuous learning and improvement.
• Compliance & Audit: Ensure that the organization remains compliant with all relevant security regulations and standards (e.g., GDPR, ISO 27001, NIST). Lead security audits and work closely with external auditors.
• Third-Party Management: Evaluate and manage the security posture of third-party vendors and partners. Ensure that third-party risks are identified and mitigated.
• Threat Intelligence: Lead the organization's threat intelligence efforts, staying ahead of emerging threats, and ensuring the organization is prepared to defend against them.
• Collaboration with Executives: Work closely with the Chief Information Security Officer (CISO) and other executive leaders to communicate security risks and ensure that security initiatives align with business goals.
• Continuous Improvement: Drive continuous improvement in the organization's security practices through innovation, research, and adoption of new technologies.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Atleast 5 years of professional experience in Information Security.
• Experience in risk management, information security, security operations, and security review.
• Must have one of the following industry certification:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM) or
• Certified Information Systems Auditor (CISA)
• Additional certifications such as CRISC (Certified in Risk and Information Systems Control) or CCSP (Certified Cloud Security Professional) are highly desirable.
• Excellent communication skills with the ability to effectively communicate complex security issues to non-technical stakeholders.