Senior Analyst Information Security And Governance

Abu Dhabi Telemedicine Centre; Abu Dhabi; On-site; AED 260,000 - 520,000; Full time

Job summary

M42 in Abu Dhabi is seeking a Senior Information Security Leader to drive the security strategy and roadmap across the organization, aligning with business goals and regulatory requirements. You will oversee risk management, incident response, security architecture, audits, and third-party risk, while mentoring junior staff and collaborating with executives to embed security into IT initiatives.

Ideal candidates hold CISSP/CISM/CISA with 5+ years in information security, and possess strong

Qualifications

• Bachelor’s degree or equivalent in information security, CS, or related field.
• 5+ years of professional information security experience.
• Experience in risk management, information security, security operations, and security reviews.
• Must hold one of CISSP, CISM, or CISA; additional certifications such as CRISC or CCSP are desirable.
• Excellent communication skills with the ability to explain complex security issues to non-technical stakeholders.

Responsibilities

• Security Strategy Development: Lead the development and implementation of the organization’s information security strategy and roadmap in alignment with business objectives.
• Advanced Risk Management: Perform in-depth risk assessments and vulnerability analyses to identify and mitigate complex security risks; develop risk management frameworks.
• Incident Management: Oversee incident response processes; coordinate with external agencies for major investigations as needed.
• Security Architecture: Design and implement advanced security architectures; embed security in IT system design and deployment.
• Leadership & Mentoring: Mentor junior security staff and foster continuous learning.
• Compliance & Audit: Ensure compliance with GDPR, ISO 27001, NIST; lead security audits with external auditors.
• Third-Party Management: Evaluate security posture of vendors; mitigate third-party risks.
• Threat Intelligence: Lead threat intelligence efforts to stay ahead of emerging threats.
• Collaboration with Executives: Work with CISO and executives to align security with business goals.
• Continuous Improvement: Drive innovation and adoption of new security technologies.

Skills

Excellent communication

Risk management

Information security

Security operations

Security review

Education

Bachelor’s degree in Information Security or Computer Science

5+ years information security experience

CISSP

CISM

CISA

CRISC

CCSP

Job description

Job Description

M42 delivers comprehensive healthcare services across the full continuum of care; from primary care to advanced specialty treatments. Leveraging cutting-edge health technologies and precision medicine, we ensure the highest standards of effectiveness, efficiency, and patient-centered outcomes. With a global presence spanning more than 480 facilities in 27 countries and a dedicated workforce of over 20,000 professionals, M42 is uniquely positioned to redefine the future of healthcare on a global scale.

This role plays a critical role in leading the organization’s security initiatives and ensuring the protection of all information assets. The role would also be responsible for designing advanced security solutions, managing complex security projects, and mentoring junior security staff. This position demands extensive experience in information security and a deep understanding of evolving cybersecurity threats.

Responsibilities

• Security Strategy Development: Lead the development and implementation of the organization’s information security strategy and roadmap in alignment with business objectives.
• Advanced Risk Management: Perform in-depth risk assessments and vulnerability analyses to identify and mitigate complex security risks. Develop risk management strategies and frameworks.
• Incident Management: Oversee the organization’s incident response process, including detection, analysis, containment, eradication, recovery, and post-incident review. Lead major incident investigations and coordinate with external agencies when necessary.
• Security Architecture: Design and implement advanced security architectures and solutions for the protection of the organization’s information assets. Ensure that security is embedded in the design and deployment of IT systems.
• Leadership & Mentoring: Provide guidance and mentorship to junior security staff, fostering a culture of continuous learning and improvement.
• Compliance & Audit: Ensure that the organization remains compliant with all relevant security regulations and standards (e.g., GDPR, ISO 27001, NIST). Lead security audits and work closely with external auditors.
• Third-Party Management: Evaluate and manage the security posture of third-party vendors and partners. Ensure that third-party risks are identified and mitigated.
• Threat Intelligence: Lead the organization’s threat intelligence efforts, staying ahead of emerging threats, and ensuring the organization is prepared to defend against them.
• Collaboration with Executives: Work closely with the Chief Information Security Officer (CISO) and other executive leaders to communicate security risks and ensure that security initiatives align with business goals.
• Continuous Improvement: Drive continuous improvement in the organization’s security practices through innovation, research, and adoption of new technologies.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Atleast 5 years of professional experience in Information Security.
• Experience in risk management, information security, security operations, and security review.
• Must have one of the following industry certification:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM) or
• Certified Information Systems Auditor (CISA)
• Additional certifications such as CRISC (Certified in Risk and Information Systems Control) or CCSP (Certified Cloud Security Professional) are highly desirable.
• Excellent communication skills with the ability to effectively communicate complex security issues to non-technical stakeholders.