Senior Information Security Specialists

United Arab Emirates University, Department of Family Medicine; Abu Dhabi; On-site; AED 150,000 - 210,000; Full time

Job summary

United Arab Emirates University, Department of Family Medicine is seeking an Information Security Specialist to strengthen the university’s cybersecurity posture. The role supports the Information Security Manager in implementing and improving the ISMS aligned with ISO/IEC 27001:2022, UAE IA Standards, and government regulations.

The specialist will conduct risk assessments, support audits, and coordinate third‑party security reviews while collaborating with IT, SOC, and business units to

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity.
• 3+ years in a similar role.

Responsibilities

• Support Information Security Manager in implementing, maintaining and improving UAEU ISMS.
• Develop, review and maintain information security policies, standards, procedures and baselines.
• Conduct information security risk assessments for systems, projects and cloud initiatives; maintain risk register.
• Monitor risk posture and provide risk analysis to management.
• Perform security control assessments, compliance reviews and gap analyses.
• Support audits by preparing documentation and remediation plans.
• Oversee vulnerability management and report risk exposure trends.
• Coordinate investigations of significant incidents and ensure corrective actions.

Education

Bachelor’s degree in computer science, Information Technology, Cybersecurity

Job description

Job Description

The Information Security Specialist supports the Information Security Manager in strengthening UAEU’s overall cybersecurity posture. This role ensures effective implementation and continuous improvement of the ISMS aligned with ISO/IEC 27001:2022, UAE IA Standards, and government regulations. It oversees information security governance, risk management, and compliance activities. The specialist conducts security assessments and supports internal and external audits. The role monitors risk posture and maintains the information security risk register. It coordinates investigation of significant security incidents and recommends corrective actions. The position ensures security controls are properly designed, implemented, and monitored. It supports third‑party and vendor security risk assessments. The specialist contributes to policy development, awareness initiatives, and regulatory reporting. The role collaborates with IT, SOC, and business units to protect institutional data and research assets.

• Support the Information Security Manager in implementing, maintaining, and continuously improving UAEU’s Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022, UAE IA Standards, and applicable regulations.
• Develop, review, and maintain information security policies, standards, procedures, and technical security baselines.
• Conduct information security risk assessments for systems, projects, and cloud initiatives, and maintain the Information Security Risk Register.
• Monitor the University’s cybersecurity risk posture and provide risk analysis and recommendations to the Information Security Manager and senior management.
• Perform security control assessments, compliance reviews, and gap analyses to ensure effective implementation of security measures.
• Support internal and external audits by preparing documentation, evidence, and remediation plans.
• Oversee vulnerability management activities, validate remediation efforts, and report on risk exposure trends.
• Coordinate and support investigation of significant cybersecurity incidents, ensuring proper documentation, root cause analysis, and corrective actions.
• Review system architectures, infrastructure changes, and new technology deployments to ensure security-by-design principles are applied.
• Conduct third‑party and vendor security assessments, review security requirements in contracts, and monitor ongoing compliance.
• Ensure effective implementation of technical and administrative controls including access management, encryption, logging, and monitoring.
• Support security awareness, education, and phishing simulation programs across the University.
• Prepare periodic security dashboards, compliance reports, and risk summaries for management and regulatory authorities.
• Collaborate with IT, SOC, data owners, and business units to strengthen control effectiveness and operational resilience.
• Promote continuous improvement of UAEU’s cybersecurity capabilities, governance practices, and regulatory compliance.
• Perform any additional information security duties as assigned by the Information Security Manager or management.

Job Description

The Information Security Specialist supports the Information Security Manager in strengthening UAEU’s overall cybersecurity posture. This role ensures effective implementation and continuous improvement of the ISMS aligned with ISO/IEC 27001:2022, UAE IA Standards, and government regulations. It oversees information security governance, risk management, and compliance activities. The specialist conducts security assessments and supports internal and external audits. The role monitors risk posture and maintains the information security risk register. It coordinates investigation of significant security incidents and recommends corrective actions. The position ensures security controls are properly designed, implemented, and monitored. It supports third‑party and vendor security risk assessments. The specialist contributes to policy development, awareness initiatives, and regulatory reporting. The role collaborates with IT, SOC, and business units to protect institutional data and research assets.

• Support the Information Security Manager in implementing, maintaining, and continuously improving UAEU’s Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022, UAE IA Standards, and applicable regulations.
• Develop, review, and maintain information security policies, standards, procedures, and technical security baselines.
• Conduct information security risk assessments for systems, projects, and cloud initiatives, and maintain the Information Security Risk Register.
• Monitor the University’s cybersecurity risk posture and provide risk analysis and recommendations to the Information Security Manager and senior management.
• Perform security control assessments, compliance reviews, and gap analyses to ensure effective implementation of security measures.
• Support internal and external audits by preparing documentation, evidence, and remediation plans.
• Oversee vulnerability management activities, validate remediation efforts, and report on risk exposure trends.
• Coordinate and support investigation of significant cybersecurity incidents, ensuring proper documentation, root cause analysis, and corrective actions.
• Review system architectures, infrastructure changes, and new technology deployments to ensure security-by-design principles are applied.
• Conduct third‑party and vendor security assessments, review security requirements in contracts, and monitor ongoing compliance.
• Ensure effective implementation of technical and administrative controls including access management, encryption, logging, and monitoring.
• Support security awareness, education, and phishing simulation programs across the University.
• Prepare periodic security dashboards, compliance reports, and risk summaries for management and regulatory authorities.
• Collaborate with IT, SOC, data owners, and business units to strengthen control effectiveness and operational resilience.
• Promote continuous improvement of UAEU’s cybersecurity capabilities, governance practices, and regulatory compliance.
• Perform any additional information security duties as assigned by the Information Security Manager or management.

Minimum Qualification

Bachelor’s degree in computer science, Information Technology, Cybersecurity

Preferred Qualification

Bachelor’s degree in computer science, Information Technology, Cybersecurity

Expected Skills

3+ years in a similar role.

Close Date

30/09/2026