Senior Information Security Analyst

Mediclinic International; Abu Dhabi; On-site; AED 180,000 - 280,000; Full time

Job summary

Mediclinic International seeks a Senior Security Analyst to strengthen security operations, incident management and compliance across Mediclinic Middle East. You will lead incident response with SOC partners and internal IT teams, develop playbooks, escalation paths and reporting procedures.

The role covers implementing and monitoring security controls across cloud, network and endpoints, supporting risk assessments and audit remediation, and defining KPIs/SLAs for MSSPs.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 3+ years of experience in cybersecurity or security operations.
• Experience with enterprise security tools; Defender suite is a plus.
• Exposure to auditing and compliance processes.
• Strong English communication skills, verbal and written.
• Experience in healthcare, regulated industries, or multi-national environments.

Responsibilities

• Security Monitoring and Incident Response
• Security Tools, Threat Posture, and Control Optimisation
• Risk Assessment, Audit and Compliance Support
• Collaboration, Awareness and Continuous Improvement

Skills

Security architecture

Auditing & compliance

Change management

Cross-functional collaboration

Education

Bachelor’s degree in Information Security

Microsoft Security Operations Analyst or equivalent

CISA

SSCP

CCSP

Tools

EDR

DLP

SIEM

Mimecast

Security Awareness

Job description

Job description

Mediclinic Corporate Office Dubai| Dubai | United Arab Emirates

MAIN PURPOSE OF JOB

The Senior Security Analyst plays a key role in strengthening security operations, incident management, and compliance within Mediclinic Middle East, while coordinating closely with other Mediclinic divisions as required. The position is responsible for leading and coordinating incident response activities across the Security Operations Centre (SOC) partners and internal IT teams, developing and maintaining response playbooks, escalation paths, and reporting procedures.

The role also includes implementing, monitoring, and optimising technical security controls across cloud, network, and endpoint environments; supporting risk assessments, vulnerability management, and audit remediation; and defining key performance indicators (KPIs) and service level agreements (SLAs) for managed security service providers.

Additionally, the Senior Security Analyst provides hands‑on guidance to IT teams to ensure alignment with corporate security frameworks and contributes to security awareness initiatives and the continuous improvement of processes, tools, and controls.

KEY RESPONSIBILITY AREAS

• Security Monitoring and Incident Response
• Security Tools, Threat Posture, and Control Optimisation
• Risk Assessment, Audit and Compliance Support
• Collaboration, Awareness and Continuous Improvement

REQUIRED EDUCATION

• Bachelor’s degree in Information Security, Computer Science, or a related field
• Microsoft Security Operations Analyst or equivalent
• Certified Information Systems Auditor (CISA) Systems Security Certified Practitioner (SSCP) Certified Cloud Security Professional (CCSP

REQUIRED EXPERIENCE

• Minimum of 3 years of experience in cybersecurity or security operations
• Good understanding of cyber hygiene, threat types, and security principles
• Experience working with and configuring enterprise security tools, experience with Defender suite is an advantage
• Exposure to auditing and compliance processes
• Strong English communication skills, both verbal and written
• Prior experience working in a group or multi-division structure is an advantage
• Familiarity with security frameworks (e.g., NIST, ISO 27001)
• Experience in healthcare, regulated industries, or multi-national environments
• Knowledge of ADHICS (Abu Dhabi Healthcare Information and Cyber Security Standard) and its application in healthcare

REQUIRED JOB SKILLS AND KNOWLEDGE

• Information security solutions and how to architect these into broader ICT installation
• Provide input into requirements documents - ensure security roles; auditing; data protection (in transit and rest); monitoring etc. are defined in line with approved Information Security policies and standards
• Enterprise security tools (EDR, DLP, SIEM, Mimecast, SecurityAwareness etc.)
• Audit and policy compliance
• Change Management methodologies
• Lead professionals through change initiatives and influence collaboration across functional disciplines

All applicants will be considered, with the understanding that preference will be given to the designated groups in accordance with the United Arab Emirates Emiratization Program.