Senior Information Security Specialists

United Arab Emirates University; Al Ain; On-site; AED 180,000 - 240,000; Full time

Job summary

United Arab Emirates University seeks an Information Security Specialist to support the Information Security Manager in strengthening the university's cybersecurity posture. The role ensures ISMS alignment with ISO/IEC 27001:2022, UAE IA Standards, and government regulations, while overseeing governance, risk, and compliance activities across IT, SOC, and business units.

The specialist conducts security assessments, supports audits, coordinates incident investigations, and helps develop policies

Qualifications

• Bachelor's degree in computer science, information technology, or cybersecurity.
• 3+ years in a similar role.
• Preferred: Bachelor's degree in computer science, information technology, or cybersecurity.

Responsibilities

• Support ISM in implementing, maintaining, and improving UAEU's ISMS per ISO/IEC 27001:2022 and UAE regulations.
• Develop, review, and maintain information security policies, standards, procedures, and baselines.
• Conduct information security risk assessments for systems, projects, and cloud initiatives; maintain risk register.

Skills

Cybersecurity

Risk assessment

Policy development

Incident response coordination

Security governance

Education

Bachelor's degree in computer science, information technology, or cybersecurity

Job description

Job Description

The Information Security Specialist supports the Information Security Manager in strengthening UAEU’s overall cybersecurity posture. This role ensures effective implementation and continuous improvement of the ISMS aligned with ISO/IEC 27001:2022, UAE IA Standards, and government regulations. It oversees information security governance, risk management, and compliance activities. The specialist conducts security assessments and supports internal and external audits. The role monitors risk posture and maintains the information security risk register. It coordinates investigation of significant security incidents and recommends corrective actions. The position ensures security controls are properly designed, implemented, and monitored. It supports third‑party and vendor security risk assessments. The specialist contributes to policy development, awareness initiatives, and regulatory reporting. The role collaborates with IT, SOC, and business units to protect institutional data and research assets.

Responsibilities

• Support the Information Security Manager in implementing, maintaining, and continuously improving UAEU’s Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022, UAE IA Standards, and applicable regulations.
• Develop, review, and maintain information security policies, standards, procedures, and technical security baselines.
• Conduct information security risk assessments for systems, projects, and cloud initiatives, and maintain the Information Security Risk Register.
• Monitor the University’s cybersecurity risk posture and provide risk analysis and recommendations to the Information Security Manager and senior management.
• Perform security control assessments, compliance reviews, and gap analyses to ensure effective implementation of security measures.
• Support internal and external audits by preparing documentation, evidence, and remediation plans.
• Oversee vulnerability management activities, validate remediation efforts, and report on risk exposure trends.
• Coordinate and support investigation of significant cybersecurity incidents, ensuring proper documentation, root‑cause analysis, and corrective actions.
• Review system architectures, infrastructure changes, and new technology deployments to ensure security‑by‑design principles are applied.
• Conduct third‑party and vendor security assessments, review security requirements in contracts, and monitor ongoing compliance.
• Ensure effective implementation of technical and administrative controls including access management, encryption, logging, and monitoring.
• Support security awareness, education, and phishing simulation programs across the University.
• Prepare periodic security dashboards, compliance reports, and risk summaries for management and regulatory authorities.
• Collaborate with IT, SOC, data owners, and business units to strengthen control effectiveness and operational resilience.
• Promote continuous improvement of UAEU’s cybersecurity capabilities, governance practices, and regulatory compliance.
• Perform any additional information security duties as assigned by the Information Security Manager or management.

Qualifications

• Minimum Qualifications: Bachelor's degree in computer science, information technology, or cybersecurity.
• Experience/Skills: 3+ years in a similar role.
• Preferred Qualifications: Bachelor's degree in computer science, information technology, or cybersecurity.