Senior Security Consultant

Digital Edge Ai; Dubai; On-site; AED 320,000 - 520,000; Full time

Job summary

Digital Edge Ai in Dubai seeks a Security Risk Manager to own the full lifecycle of security risk management across IT and digital systems. You will identify gaps, plan remediation, and coordinate with implementation teams to close risks while keeping the security posture aligned with ISO 27001 and NIST standards.

Responsibilities include regular security assessments, threat monitoring with SIEM tools, and governance reporting to senior management.

Qualifications

• Bachelor's Degree in IT, Computer Science or related field.
• 10–15 years of information/cyber security experience.
• Hands-on experience identifying security gaps and coordinating remediation.
• Experience with QRadar or other SIEM monitoring tools.
• Familiarity with ISO 27001, NIST, CIS Controls.
• Experience securing marine/offshore or remote-site IT environments.
• Cloud security on OCI and Azure.
• Certifications CISSP, CEH, CRISC or Fortinet NSE preferred.

Responsibilities

• Conduct regular security assessments and reviews to evaluate the organization's security posture.
• Proactively identify security gaps, vulnerabilities, and risks across networks, systems, applications, cloud, and end-user environments.
• Develop remediation plans with priorities and ownership; coordinate with IT and implementation teams to close gaps.
• Monitor alerts with SIEM tools and respond to incidents; document findings and actions.
• Provide governance, reporting, and compliance support; communicate to senior management.
• Advise on security best practices and drive continuous improvement.

Skills

CISM

CISA

QRadar

SIEM

Network security

Cloud security

Endpoint security

ISO 27001

NIST

CIS Controls

Vulnerability management

Penetration testing

Risk assessment

Fortinet NSE

Azure

OCI

CISSP

CEH

CRISC

Education

Bachelor's Degree in IT/Computer Science

Tools

QRadar

Job description

Job Purpose

To protect the organization from growing security threats by identifying security gaps and risks coordinating with implementation teams to close them and ensuring the company s security posture remains current against the evolving threat landscape The role owns the full lifecycle of security risk management identify notify plan execute and deliver across all IT amp Digital systems and sites

Key Responsibilities

Security Gap & Risk Identification

• Conduct regular security assessments audits and reviews to evaluate the organization s security postureProactively identify security gaps vulnerabilities and risks across network systems applications cloud and end-user environmentsResearch and recommend resolutions and mitigation strategies for identified and emerging threatsStay up to date on the latest security threats attack techniques and industry vulnerabilities and assess their relevance impact to the organization

Notification, Planning, & Coordination

• Notify relevant stakeholders and management promptly of identified security gaps risks and threatsDevelop clear remediation plans with priorities timelines and ownership for each identified gapCoordinate closely with IT network and implementation teams to execute remediation plans and close security gapsTrack remediation progress end-to-end and ensure gaps are closed within agreed timelines escalating delays as needed

Monitoring & Threat Management

• Monitor security alerts and events using QRadar or other SIEM monitoring tools to detect potential threats and incidentsAnalyze security events investigate anomalies and determine appropriate response actionsSupport incident response activities including investigation containment and post-incident reviewMaintain and continuously improve threat detection use cases rules and monitoring coverage

Governance, Compliance & Reporting

• Ensure security practices align with recognized frameworks and standards e g ISO 27001 NIST and applicable regulatory requirementsMaintain a security risk register documenting identified gaps status ownership and closure evidencePrepare and present regular reports on security posture open risks remediation status and emerging threats to managementSupport internal and external security audits and assessments

Advisory & Continuous Improvement

• Advise management and IT teams on security best practices policies and controlsRecommend and help plan security improvements tools and technologies to strengthen the organization s defencesSupport security awareness efforts across the organizationContinuously review and enhance security processes to keep pace with the evolving threat landscape

Qualifications

• Bachelor's Degree in IT, Computer Science or a related field10 15 years of experience in information/cyber security, including hands-on experience identifying security gaps and coordinating remediation with implementation teams
• Proven track record of managing the full lifecycle of security risks: identify, notify, plan, execute, and deliver
• Experience in marine, construction, contracting, or similar industries is an advantage
• CISM (Certified Information Security Manager) certified required
• CISA (Certified Information Systems Auditor) certified required
• Hands-on experience with QRadar or other SIEM/security monitoring tools
• Strong knowledge of network security, cloud security, and endpoint security principles
• Solid understanding of security frameworks and standards (ISO 27001, NIST, CIS Controls, etc.)
• Familiarity with vulnerability management, penetration testing, and risk assessment methodologies
• Up-to-date knowledge of current and emerging cyber threats, attack techniques, and mitigation approaches
• Strong analytical, investigative, and problem-solving skills
• Excellent coordination skills, with the ability to work effectively with cross-functional implementation teams
• Clear and confident communication and reporting skills, including to senior management
• Highly organized, with strong follow-through from identification to closure of security gaps
• Ability to work independently, prioritize risks, and drive results under pressure
• Additional certifications such as CISSP, CEH, CRISC or Fortinet NSE
• Experience securing marine/offshore or remote-site IT environments
• Experience with cloud security on OCI and/or Azure