Senior Security Assurance Specialist

QUEEN Consulting Tunisia; United Arab Emirates; À distance; AED 300 000 - 500 000; Plein temps

Avantages offerts par ce poste

100% remote work

Résumé du poste

QUEEN Consulting Tunisia is seeking a Senior Security Assurance Specialist for a fully remote position based in the United Arab Emirates. The role focuses on evaluating and improving information security controls across enterprise and cloud environments.

You will conduct remote assessments, review evidence, and support audits and regulatory examinations while coordinating with cross-functional teams to prioritize remediation.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• Significant experience in information security, security assurance, IT risk management, cybersecurity auditing, or compliance.
• Strong understanding of information security principles, risk assessment methodologies, and control frameworks.
• Experience reviewing penetration tests, vulnerability assessments, and security documentation.

Responsabilités

• Develop and maintain security assurance plans, assessment methodologies, control evaluation procedures, and reporting standards.
• Conduct remote assessments of information security policies, procedures, technical controls, and operational practices.
• Evaluate the design and effectiveness of security controls across infra, applications, databases, networks, and cloud environments.
• Review security configurations, vulnerability reports, penetration testing results, and remediation evidence.
• Assess security risks related to information systems, third-party providers, and technology changes.
• Review IAM controls, authentication mechanisms, and user entitlement practices.
• Coordinate remotely with technical teams to discuss findings and remediation priorities.
• Monitor remediation plans and verify evidence of corrective actions.
• Assist with audits, customer assurance reviews, and regulatory examinations.

Connaissances

Information security

Risk assessment

Audit management

Documentation

Stakeholder communication

Analytical thinking

Remote collaboration

Security governance

Formation

Bachelor's degree in Cybersecurity

Outils

Excel

Audit management systems

Security reporting tools

Risk management platforms

Description du poste

Job Title: Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Security Assurance Specialist to support the assessment, monitoring, and improvement of information security controls across enterprise systems, applications, cloud environments, and business operations. This role focuses on security control evaluations, risk assessments, compliance reviews, audit evidence analysis, and assurance reporting.

The successful candidate will work remotely with cybersecurity, IT operations, risk management, compliance, and business teams to evaluate security practices, identify control weaknesses, and recommend practical improvements. The position emphasizes evidence-based assurance, security governance, and continuous control improvement.

Key Responsibilities

• Develop and maintain security assurance plans, assessment methodologies, control evaluation procedures, and reporting standards.
• Conduct remote assessments of information security policies, procedures, technical controls, and operational practices.
• Evaluate the design and effectiveness of security controls across infrastructure, applications, databases, networks, and cloud environments.
• Review security configurations, vulnerability assessment reports, penetration testing results, and remediation evidence.
• Assess security risks associated with information systems, third-party providers, business applications, and technology changes.
• Review identity and access management controls, privileged access arrangements, authentication mechanisms, and user entitlement practices.
• Evaluate security monitoring, incident management, vulnerability management, and business continuity control processes.
• Assess compliance with relevant security frameworks, standards, and regulatory requirements.
• Support security assurance activities aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and COBIT.
• Review security policies, risk registers, control matrices, audit reports, and technical documentation.
• Identify control gaps, security weaknesses, and areas requiring corrective or preventive action.
• Prepare security assessment reports, risk summaries, control effectiveness evaluations, and management recommendations.
• Monitor remediation plans and verify submitted evidence of corrective actions.
• Support internal audits, external security assessments, customer assurance reviews, and regulatory examination preparation.
• Review third-party security questionnaires, supplier assurance documentation, and information security evidence.
• Assist with security governance reporting, key risk indicators, and control performance dashboards.
• Coordinate remotely with technical teams to clarify assessment findings and agree on remediation priorities.
• Recommend improvements to security assurance processes, control testing methods, and evidence management practices.
• Monitor emerging cybersecurity threats, regulatory developments, and changes in recognized security standards.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Significant professional experience in information security, security assurance, IT risk management, cybersecurity auditing, or compliance.
• Strong understanding of information security principles, security control frameworks, and risk assessment methodologies.
• Experience conducting security control reviews, evidence-based assessments, gap analyses, and remediation tracking.
• Knowledge of security technologies and practices involving network security, endpoint protection, encryption, identity management, cloud security, and vulnerability management.
• Familiarity with security standards and frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and COBIT.
• Experience reviewing penetration testing reports, vulnerability assessments, security incident records, and technical control documentation.
• Understanding of third-party risk management and supplier security assurance processes.
• Proficiency in Microsoft Excel, risk management platforms, audit management systems, and security reporting tools.
• Strong analytical, investigative, and problem-solving abilities.
• Excellent technical documentation, report‑writing, and stakeholder communication skills.
• High attention to detail and sound judgment when handling confidential security information.
• Ability to manage multiple assessments independently in a fully remote environment.
• Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, or equivalent are advantageous.

What We Offer

• A 100% remote working arrangement from home.
• Competitive compensation aligned with qualifications and professional experience.
• Opportunities to contribute to enterprise cybersecurity assurance and risk reduction initiatives.
• Exposure to security frameworks, cloud environments, enterprise technology, and governance programs.
• Professional development in information security, IT risk, and compliance assurance.
• A collaborative working environment involving technology, security, audit, and business teams.