Senior Associate Information Security- Emirati

Fisher Human Resource Consultancy; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

Fisher Human Resource Consultancy seeks an Associate – Information Security to manage and monitor the organization’s information security framework, ensuring compliance with policies and standards. The role supports risk management, governance, and business continuity initiatives across systems and vendors.

The candidate will perform security assessments, review controls, and help mitigate risks while driving improvements to strengthen the organization’s security posture.

Qualifications

• Bachelor’s degree in a related field (required).
• Master’s or specialization in Computer Science, Engineering, or IT preferred.
• Professional cybersecurity certification (e.g., CISSP, CCSP, CISM).
• Proficient in English (spoken and written).

Responsibilities

• Contribute to governance framework, standards and procedures.
• Assess security controls and recommend improvements.
• Perform security reviews, control assessments, and compliance evaluations.
• Support governance and oversight of security initiatives.
• Review configurations, privileges, network controls for compliance.
• Establish and monitor security KPIs and risk metrics.
• Participate in security reviews during tech initiatives.
• Develop and test incident response capabilities.
• Support compliance activities and audits.
• Monitor cybersecurity platforms and privileged access controls.
• Review business resilience, disaster recovery and continuity plans.
• Coordinate with risk management to identify cyber risks.
• Evaluate operational processes and internal controls.
• Maintain risk documentation and mitigation tracking.
• Support data governance and fraud prevention initiatives.
• Deliver cybersecurity awareness and security-focused culture.
• Stay updated on threats and best practices.

Skills

GRC experience

ISO/NIST frameworks

DevSecOps

Cloud platforms

English proficiency

Certifications

Education

Bachelor’s degree in a related field

Master’s or specialization in CS/IT

Job description

We are seeking Associate – Information Security who manages and monitors the organization’s information security framework, ensuring compliance with internal policies, regulatory standards, and industry best practices. The role supports enterprise security, data governance, risk management, and business continuity initiatives; conducts security assessments and risk reviews; monitors cybersecurity controls and KPIs; and identifies and mitigates security risks across systems & vendors

• Contribute to the development, implementation, and continuous enhancement of the organization's information security governance framework, standards, and operating procedures.
• Assess the effectiveness of security controls and recommend improvements to strengthen the overall cybersecurity posture across technology environments and third‑party engagements.
• Perform regular security reviews, control assessments, and compliance evaluations to identify risks, vulnerabilities, and opportunities for improvement.
• Support the governance and oversight of information security initiatives, ensuring alignment with organizational objectives and regulatory expectations.
• Review security configurations, user privileges, network controls, and infrastructure settings to verify compliance with security best practices and identify potential weaknesses.
• Establish and monitor security performance indicators and risk metrics, providing meaningful reporting to support informed decision‑making.
• Participate in technology initiatives and transformation programs by performing security reviews, identifying potential risks, and recommending practical mitigation strategies throughout the project lifecycle.
• Develop, maintain, and periodically test cybersecurity incident response capabilities to ensure effective preparation, response, and recovery from security events.
• Support compliance activities related to information security, data protection, and regulatory obligations, including internal and external audit engagements.
• Monitor the effectiveness of cybersecurity platforms and privileged access controls while supporting the implementation of new security technologies and continuous improvement initiatives.
• Review business resilience, disaster recovery, and continuity arrangements to ensure appropriate planning, testing, and operational readiness.
• Work closely with risk management and assurance functions to identify emerging cyber risks, evaluate their impact, and support the implementation of effective mitigation measures.
• Evaluate security‑related operational processes and internal controls, recommending enhancements to reduce exposure to cyber threats, data compromise, and operational risk.
• Maintain risk documentation and follow up on mitigation plans, ensuring identified actions are tracked, monitored, and completed within agreed timelines.
• Support enterprise risk, data governance, and fraud prevention initiatives by promoting consistent implementation of security and governance controls across the organization.
• Deliver cybersecurity awareness sessions and promote a security‑first culture through ongoing education and engagement initiatives.
• Assist with maintaining compliance against recognized industry standards and regulatory frameworks, coordinating assessments, certifications, and remediation activities where required.
• Stay up to date with emerging cybersecurity threats, new technologies, and industry best practices, and recommend improvements to strengthen the organization's overall security posture.

Skills

Requirements

Education & Skills

• Bachelor’s degree in a related field
• Master’s or specialization in Computer Science, Engineering, or IT (Preferred)
• Professional cybersecurity certification (e.g., CISSP, CCSP, CISM)
• Proficient in English

Experience & Knowledge

• 3-5 years of hands‑on experience in Information Security GRC, including architecture, review, and deployment of next‑generation firewalls, WAFs, DLP, PAM, IAM solutions
• 3+ years implementing ISO standards, NIST frameworks, CIS benchmarking, and developing KPIs/KRIs
• Experience with enterprise‑level integrations, DevSecOps lifecycle, and Cloud platforms (Azure, AWS, GCP), API management, and microservices architecture
• Ability to align information security strategies with technical projects and mitigate risks for digital transformation initiatives

Abilities & Specific Requirements

• Must be Emirati with Family Book
• Able to manage multiple priorities under pressure and meet deadlines
• Works effectively and responsibly without supervision
• Can execute clear strategies and corporate requirements
• Adaptable to start‑up or fast‑paced environments; flexible and agile thinker (Preferred)
• Applies a structured, analytical approach to challenges
• Demonstrates critical thinking and problem‑solving capabilities