Job Title: Senior Records Security Specialist
About the Role
We are seeking an experienced Senior Records Security Specialist to oversee the protection, confidentiality, integrity, and appropriate accessibility of organizational records and information assets. The successful candidate will support records security policies, access controls, information governance, retention requirements, and secure records management practices while helping ensure compliance with applicable data protection and regulatory obligations.
This fully remote role requires strong knowledge of information security, records management, access governance, and risk mitigation. The ideal candidate will collaborate with information technology, compliance, legal, privacy, audit, and business teams to strengthen records security controls and maintain reliable, auditable information management processes.
Key Responsibilities
- Develop, maintain, and improve records security policies, procedures, standards, and operational guidelines.
- Protect electronic records and sensitive documentation against unauthorized access, disclosure, alteration, loss, or destruction.
- Review and manage records access permissions in accordance with role-based access control, least-privilege principles, and approved authorization procedures.
- Conduct periodic access reviews to identify excessive permissions, inactive accounts, segregation-of-duties concerns, and unauthorized access risks.
- Support the classification and handling of confidential, restricted, personal, financial, and other sensitive records.
- Monitor compliance with records retention schedules, secure storage requirements, archival procedures, and authorized disposal processes.
- Coordinate secure records transfer, sharing, retrieval, and access revocation across approved systems and business functions.
- Assess records security risks and recommend appropriate administrative, technical, and procedural safeguards.
- Support investigations into suspected records breaches, inappropriate access, unauthorized disclosures, and potential information security incidents.
- Maintain accurate audit trails, access logs, control evidence, incident records, and documentation of security-related decisions.
- Assist with internal audits, compliance assessments, risk reviews, and remediation activities relating to records management and information security.
- Collaborate with IT and cybersecurity teams to support encryption, identity and access management, data loss prevention, backup, and recovery controls.
- Review third-party records management arrangements and help assess the security of external storage, archiving, and document processing services.
- Support compliance with applicable UAE data protection, records management, confidentiality, and sector-specific regulatory requirements.
- Develop records security awareness materials and provide guidance to employees on secure document handling and information-sharing practices.
- Identify opportunities to automate access reviews, improve records classification, and strengthen monitoring and reporting processes.
- Provide technical guidance to junior team members and support consistent application of records security standards.
Qualifications and Experience
- Bachelor's degree in Information Security, Information Technology, Cybersecurity, Records Management, Information Governance, or a related discipline.
- Significant professional experience in records security, information governance, document management, data protection, or information security operations.
- Strong understanding of records lifecycle management, information classification, retention, archival, and secure disposal practices.
- Experience with access control administration, role-based permissions, identity and access management, and periodic access certification.
- Knowledge of information security principles, including confidentiality, integrity, availability, auditability, and least-privilege access.
- Familiarity with relevant UAE data protection requirements and applicable industry-specific records security obligations.
- Experience supporting audits, risk assessments, incident investigations, compliance reviews, and control remediation.
- Familiarity with enterprise content management, electronic document management, records management, and secure collaboration platforms.
- Understanding of encryption, audit logging, data loss prevention, backup controls, and secure information transfer methods.
- Strong analytical, organizational, documentation, and problem-solving skills.
- Ability to assess security risks, investigate access discrepancies, and recommend practical control improvements.
- Excellent written and verbal communication skills, with the ability to work effectively across technical and nontechnical teams.
- Relevant professional certifications, such as CISSP, CISM, CRISC, or information governance and records management certifications, are advantageous.
- Ability to manage sensitive information responsibly and work independently in a fully remote environment.
What We Offer
- A 100% remote, work-from-home arrangement.
- A full-time senior-level opportunity in records security and information governance.
- Opportunities to improve information protection, access management, and records control frameworks.
- Professional development in cybersecurity, privacy, compliance, and enterprise information management.
- A collaborative remote working environment focused on accountability, confidentiality, and continuous improvement.