Security Guard Jobs in UAE

<ul><li><p>Strong hands-on experience with&nbsp;<strong>Palo Alto and Check Point Firewalls</strong>.</p></li><li><p>Experience with&nbsp;<strong>F5 Load Balancer / WAF</strong>.</p></li><li><p>Experience with&nbsp;<strong>Packet Broker</strong>&nbsp;solutions such as Gigamon or equivalent.</p></li><li><p>Hands-on experience with&nbsp;<strong>EDR and NDR</strong>&nbsp;technologies.</p></li><li><p>Experience with&nbsp;<strong>Trellix</strong>&nbsp;security solutions.</p></li><li><p>Strong experience with&nbsp;<strong>PAM (Privileged Access Management)</strong>&nbsp;solutions.</p></li><li><p>Experience with&nbsp;<strong>MFA (Multi-Factor Authentication)</strong>&nbsp;solutions.</p></li><li><p>Experience with NXFW, WAF and enterprise security infrastructure.</p></li><li><p>Exposure to&nbsp;<strong>Encryptors and HSM</strong>&nbsp;technologies is preferred.</p></li><li><p>Knowledge/experience with&nbsp;<strong>SIEM and SOAR</strong>&nbsp;platforms.</p></li><li><p>Strong experience in security incident investigation, troubleshooting, mitigation and Root Cause Analysis (RCA).</p></li><li><p>Good understanding of networking protocols, security architecture and network security technologies.</p></li><li><p>Experience working with Network, NOC, SOC and Application teams.</p></li><li><p>Private/AI Cloud Security experience will be an advantage.</p></li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li><p>&nbsp;7–12+ years of relevant Network Security experience.</p></li><li><p>Bachelor’s degree in computer science, Information Technology, or a related field.</p></li><li><p><strong>CCIE Security</strong>&nbsp;and relevant vendor certifications such as Palo Alto, Check Point, F5 or CompTIA Security+ are preferred.</p></li><li><p>Good understanding of&nbsp;<strong>ITIL Incident, Change and Problem Management</strong>&nbsp;processes.</p></li></ul><br>

Listed on CyberJobs.cc, a job board for cybersecurity jobs from the team behind AITraining.jobs.<br><br>Lightning Labs is seeking to hire a Security Engineer for the ongoing scaling of our growing engineering organization. This is a hands-on role that consists of devising and implementing policies and procedures around best practices in systems security. The ideal candidate has experience in securing web, Bitcoin, and other public-facing network services, penetration testing, and both automated and manual source code security reviews. Due to the domain in which we work, experience with Bitcoin and the Lightning Network is extremely desirable as is knowledge of the cryptographic aspects involved in this area.<br><br>As we are an international organization, experience and comfort working with highly distributed teams is a must. In addition, the ideal candidate should have a passion for our mission of bringing financial freedom to the world, as well as for Bitcoin as a whole. Although a part of the engineering organization, candidates in this position will work across functional team boundaries to ensure all aspects of the business are appropriately considered and covered by security best practices.<br><br>Responsibilities may include but are not limited to<br><br><ul><li>Designing and deploying active fuzzing, black+white box testing and penetration testing infrastructure for open source and production systems</li><li>Performing security audits and review of both internal production systems as well as open source software which interacts with Bitcoin+Lightning in a security critical manner</li><li>Provide mentorship and guidance to level up your teammates</li><li>Creating global security policy, standards, guidelines, and procedures to ensure ongoing maintenance of security</li><li>Overseeing security aspects of software release processes and infrastructure</li><li>Determining security team requirements for future growth</li><li>Developing and ensuring responsiveness of security incident management processes</li><li>Performing risk management assessments<br><br></li></ul><strong>Preferred Experience<br><br></strong><ul><li>At least 5 years prior experience in in systems security</li><li>An ability to work with a high impact, fast-moving startup team</li><li>Extensive knowledge of operating system and computer architecture internals</li><li>Strong understanding of cryptography, protocol design and adversarial analysis</li><li>Experience in reverse engineering and exploiting of cryptographic protocol (cryptocurrencies like Bitcoin) systems</li><li>Extensive expertise with professional software development experience in Go, Rust, C/C++, and/or Java</li><li>Experience in security incident response</li><li>Experience in security code review and vulnerability triaging</li><li>Prior experience running an open source facing bug bounty program</li><li>2+ years management experience or experience as a senior decision maker</li><li>Experience working with remote teams</li><li>Experience working with Kubernetes and AWS infrastructure</li><li>Working knowledge of fundamental Bitcoin and Lightning design principles</li><li>Candidates with additional experience are welcome to apply as we are open to adjusting the role accordingly</li></ul>

<p><strong>Key Responsibilities:</strong></p><ul><li><p>Conduct web, mobile, API and network penetration testing.</p></li><li><p>Identify vulnerabilities and security weaknesses.</p></li><li><p>Prepare penetration-testing reports.</p></li><li><p>Validate remediation activities.</p></li><li><p>Conduct vulnerability assessments and security reviews.</p></li><li><p>Support red-team and application-security activities.</p></li></ul><br><p><strong>Desired Candidate Profile</strong></p><p><strong>Required Skills:</strong></p><ul><li><p>Web Application Security</p></li><li><p>API Security</p></li><li><p>Mobile Security</p></li><li><p>Network Penetration Testing</p></li><li><p>Burp Suite</p></li><li><p>Metasploit</p></li><li><p>OWASP</p></li><li><p>Kali Linux</p></li><li><p>CEH / OSCP preferred</p></li></ul>

<p> <strong>Full version</strong> </p> <p> <strong>JOB DESCRIPTION PRESALES ENGINEER (NETWORK SECURITY &amp; CYBERSECURITY)</strong> </p> <p>Company: OSI </p> <p>Department: Technical / Presales</p> <p>Location: UAE / India</p> <p>Experience: 5-10 Years</p> <p>Employment Type: Full-time</p> <p>1. JOB OVERVIEW</p> <p>OSI Group is looking for a technically skilled, customer-focused Presales Engineer to support its growing IT infrastructure, networking and cybersecurity business.</p> <p>You will work closely with the sales, technical, vendor and delivery teams to understand customer requirements, design the right technical solutions, prepare proposals and deliver technical presentations. The ideal candidate has a good understanding of enterprise networking, network security, endpoint security, cloud security and modern SASE/SSE solutions.</p> <p>2. KEY RESPONSIBILITIES</p> <p>A. Technical Presales &amp; Solution Design</p> <ul> <li> Understand customers' business and technical requirements and translate them into suitable technology solutions.</li> <li> Design and propose enterprise IT infrastructure, networking and cybersecurity solutions.</li> <li> Prepare architecture diagrams, Bills of Quantities (BOQs), technical proposals and solution documents.</li> <li> Conduct technical assessments and requirement-gathering sessions with customers.</li> <li> Build solution designs aligned to the customer's environment, budget and business needs.</li> <li> Work with OEMs and distributors to validate solutions, licensing and technical configurations.</li> </ul> <p>B. Network Security &amp; Infrastructure</p> <p>Knowledge and presales experience in:</p> <ul> <li> Next-Generation Firewalls (NGFW)</li> <li> Network and Perimeter Security</li> <li> Routing, Switching, VLAN, VPN and SD-WAN</li> <li> Secure Remote Access and Network Segmentation</li> <li> Data Centre and Disaster Recovery solutions</li> <li> Network Monitoring and Management</li> <li> Server, Storage and Virtualization</li> <li> Cloud Infrastructure and Cloud Security</li> </ul> <p>Preferred OEMs: Fortinet, Palo Alto Networks, Check Point, Cisco and other enterprise networking and security vendors.</p> <p>C. SASE, SSE &amp; Zero Trust Security</p> <p>Understanding of cloud-delivered security architectures, with exposure to SASE (Secure Access Service Edge), SSE (Security Service Edge) and ZTNA (Zero Trust Network Access).</p> <p>Preferred OEMs:</p> <ul> <li> Netskope SSE, CASB, SWG, DLP, ZTNA</li> <li> Cato Networks SASE Architecture, Secure SD-WAN, Firewall-as-a-Service (FWaaS), SWG, ZTNA</li> <li> Zscaler Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zero Trust Architecture, Secure Internet and Private Application Access</li> </ul> <p>Knowledge of remote workforce protection and hybrid network security is desirable.</p> <p>D. Endpoint &amp; Cybersecurity Solutions</p> <ul> <li> Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR)</li> <li> Endpoint Protection and Antivirus</li> <li> Email Security and Advanced Threat Protection</li> <li> SIEM and Security Operations Centre (SOC) solutions</li> <li> Vulnerability Assessment and Management</li> <li> Identity and Access Management (IAM)</li> <li> Data Loss Prevention (DLP)</li> <li> Security Awareness solutions</li> </ul> <p>Preferred OEMs: CrowdStrike, SentinelOne, Microsoft Security, Cynet and other leading cybersecurity vendors.</p> <p>E. Sales Support &amp; Customer Engagement</p> <ul> <li> Support the sales team in customer meetings and technical discussions.</li> <li> Deliver technical presentations, product demonstrations and Proofs of Concept (POCs).</li> <li> Respond to RFPs, RFQs and RFIs.</li> <li> Prepare technical compliance documents and solution comparisons.</li> <li> Identify upselling and cross-selling opportunities with the sales team.</li> <li> Participate in customer workshops.</li> <li> Explain complex technical solutions in simple business terms.</li> </ul> <p>F. Vendor &amp; Internal Coordination</p> <ul> <li> Coordinate with OEMs, distributors and technology partners for technical support, clarifications, configurations and licensing details.</li> <li> Work with implementation and delivery teams to ensure proposed solutions are technically feasible.</li> <li> Maintain technical documentation, proposals and solution designs.</li> <li> Stay updated on emerging technologies, cybersecurity products and industry trends.</li> </ul> <p>3. REQUIRED SKILLS &amp; QUALIFICATIONS</p> <ul> <li> Bachelor's degree in Computer Science, Information Technology, Networking or a related field.</li> <li> 2 5 years of experience in IT Presales, Network Engineering, Cybersecurity or Technical Consulting.</li> <li> Strong understanding of enterprise networking and cybersecurity technologies.</li> <li> Experience preparing technical proposals, BOQs, RFP responses and solution architectures.</li> <li> Knowledge of routing, switching, TCP/IP, VLAN, VPN, firewalls and network security.</li> <li> Understanding of SASE, SSE, ZTNA and cloud security concepts.</li> <li> Strong customer-facing, communication and presentation skills.</li> <li> Ability to work independently and handle multiple opportunities at once.</li> </ul> <p>4. PREFERRED CERTIFICATIONS</p> <ul> <li> Fortinet NSE / FCP</li> <li> Palo Alto Networks (PCNSA / PCNSE)</li> <li> Cisco CCNA / CCNP</li> <li> Zscaler, Netskope or Cato Networks certifications</li> <li> CompTIA Security+</li> <li> Microsoft Azure / AWS certifications</li> <li> Other relevant networking and cybersecurity certifications</li> </ul> <p>5. KEY COMPETENCIES</p> <ul> <li> Strong analytical and problem-solving skills</li> <li> Customer-oriented approach</li> <li> Excellent verbal and written communication</li> <li> Technical presentation and demonstration skills</li> <li> Ability to understand requirements and recommend suitable solutions</li> <li> Strong coordination and teamwork</li> <li> Ability to manage multiple presales opportunities and deadlines</li> </ul> <p>6. KEY PERFORMANCE EXPECTATIONS</p> <ul> <li> Timely preparation and submission of technical proposals and BOQs</li> <li> Effective technical support to the sales team in closing opportunities</li> <li> Successful execution of customer demos and POCs</li> <li> Accuracy and quality of proposed solutions</li> <li> Effective engagement with OEMs, distributors and customers</li> <li> Continuous learning across emerging security technologies</li> </ul> <p>7. IDEAL CANDIDATE PROFILE</p> <p>A technically strong Network Security / Cybersecurity Engineer looking to build or continue a career in Presales. Candidates with experience in Fortinet, Palo Alto, Netskope, Cato Networks, Zscaler, CrowdStrike and other enterprise cybersecurity solutions will be preferred.<strong>Role &amp; responsibilities</strong> </p> <br> <br> <p> <strong>Preferred candidate profile</strong> </p> <br> <br><p><strong>Desired Candidate Profile</strong></p><ul> <li> Bachelor's degree in Computer Science, Information Technology, Networking or a related field.</li> <li> 2 5 years of experience in IT Presales, Network Engineering, Cybersecurity or Technical Consulting.</li> <li> Strong understanding of enterprise networking and cybersecurity technologies.</li> <li> Experience preparing technical proposals, BOQs, RFP responses and solution architectures.</li> <li> Knowledge of routing, switching, TCP/IP, VLAN, VPN, firewalls and network security.</li> <li> Understanding of SASE, SSE, ZTNA and cloud security concepts.</li> <li> Strong customer-facing, communication and presentation skills.</li> <li> Ability to work independently and handle multiple opportunities at once.</li> </ul> <p> <strong>PREFERRED CERTIFICATIONS</strong> </p> <ul> <li> Fortinet NSE / FCP</li> <li> Palo Alto Networks (PCNSA / PCNSE)</li> <li> Cisco CCNA / CCNP</li> <li> Zscaler, Netskope or Cato Networks certifications</li> <li> CompTIA Security+</li> <li> Microsoft Azure / AWS certifications</li> <li> Other relevant networking and cybersecurity certifications</li> </ul> <p> <strong>KEY COMPETENCIES</strong> </p> <ul> <li> Strong analytical and problem-solving skills</li> <li> Customer-oriented approach</li> <li> Excellent verbal and written communication</li> <li> Technical presentation and demonstration skills</li> <li> Ability to understand requirements and recommend suitable solutions</li> <li> Strong coordination and teamwork</li> <li> Ability to manage multiple presales opportunities and deadlines</li> </ul>

<p>The role of Sr Infosec Governance Manager, you will lead the day-to-day security governance, certification and assurance programme Client Details A growing FS organisation in the Middle East. Description * Lead the day-to-day security governance, certification and assurance programme. * Own the ISMS, including ISO 27001 certification, surveillance, recertification and continual improvement. * Lead SOC 2 Type I / II readiness and examination activities, including control mapping, evidence management and auditor coordination. * Build and maintain security control frameworks, policies, evidence programmes and remediation processes. * Work directly with engineering, product and operational teams to implement and improve security controls. * Perform control testing, identify deficiencies and drive remediation through to verified closure. * Coordinate external audits, due diligence, security questionnaires and assurance requests. * Develop clear reporting on certification status, control effectiveness, findings, exceptions and remediation. * Improve assurance activities through automation, reusable evidence, continuous monitoring and appropriate GRC tooling. Job Offer * A senior individual contributor role with direct access to the leadership. * The opportunity to build and operate the security governance and assurance architecture for a cloud native business.</p><p>* At least 10 years' experience across information security, security assurance, technology risk or a related discipline, including a minimum of five years in security GRC or assurance. * Experience in fintech, payments, digital banking, investment, financial services or another regulated environment. * Direct experience leading ISO 27001 certification and operating an ISMS. * Direct experience leading SOC 2 Type I and/or Type II readiness and examinations. * A track record of personally implementing controls, building evidence programmes and driving audits and remediation to successful outcomes. * Experience working closely with engineering, cloud and product teams in cloud environments. * Practical experience supporting external audits, client diligence and customer security assessments. * Tangible experience in AI governance, AI risks or security assurance. * Relevant qualifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or CISSP would be advantageous.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <br><br>The role of Sr Infosec Governance Manager, you will lead the day-to-day security governance, certification and assurance programme<br><br>Client Details<br><br>A growing FS organisation in the Middle East. <br><br>Description<br>Lead the day-to-day security governance, certification and assurance programme.Own the ISMS, including ISO 27001 certification, surveillance, recertification and continual improvement.Lead SOC 2 Type I / II readiness and examination activities, including control mapping, evidence management and auditor coordination.Build and maintain security control frameworks, policies, evidence programmes and remediation processes.Work directly with engineering, product and operational teams to implement and improve security controls.Perform control testing, identify deficiencies and drive remediation through to verified closure.Coordinate external audits, due diligence, security questionnaires and assurance requests.Develop clear reporting on certification status, control effectiveness, findings, exceptions and remediation.Improve assurance activities through automation, reusable evidence, continuous monitoring and appropriate GRC tooling.<br><br><br>Profile<br>At least 10 years' experience across information security, security assurance, technology risk or a related discipline, including a minimum of five years in security GRC or assurance.Experience in fintech, payments, digital banking, investment, financial services or another regulated environment.Direct experience leading ISO 27001 certification and operating an ISMS.Direct experience leading SOC 2 Type I and/or Type II readiness and examinations.A track record of personally implementing controls, building evidence programmes and driving audits and remediation to successful outcomes.Experience working closely with engineering, cloud and product teams in cloud environments.Practical experience supporting external audits, client diligence and customer security assessments.Tangible experience in AI governance, AI risks or security assurance.Relevant qualifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or CISSP would be advantageous.<br><br><br>Job Offer<br>A senior individual contributor role with direct access to the leadership.The opportunity to build and operate the security governance and assurance architecture for a cloud native business. <br><br> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills">ISO, SOC<br> </div>

Property Finder is the leading property portal in the Middle East and North Africa (MENA) region, dedicated to shaping an inclusive future for real estate while spearheading the region’s growing tech ecosystem. At its core is a clear and powerful purpose: To change living for good in the region.<br><br>Founded on the value of great ambitions, Property Finder connects millions of property seekers with thousands of real estate professionals every day. The platform offers a seamless and enriching experience, empowering both buyers and renters to make informed decisions. Since its inception in 2007, Property Finder has evolved into a trusted partner for developers, brokers, and home seekers. As a lighthouse tech company, it continues to create an environment where people can thrive and contribute meaningfully to the transformation of real estate in MENA.<br><br><strong>Role Overview<br><br></strong>The Cloud Security Engineer is responsible for designing, implementing, and maintaining security controls across AWS environments. This role ensures that cloud workloads, data, identities, and infrastructure remain secure, compliant, and resilient against evolving threats. The engineer works closely with DevOps and Engineering teams to embed security into every layer of the cloud ecosystem.<br><br><strong>Key Responsibilities<br><br></strong><ul><li>Cloud Security Architecture — Design and implement secure AWS architectures using best-practice frameworks such as the AWS Well-Architected Security Pillar.</li><li>Identity &amp; Access Management — Configure and manage IAM roles, policies, permission boundaries, and least-privilege access models.</li><li>Threat Detection &amp; Monitoring — Deploy and tune services like GuardDuty, Security Hub, CloudTrail, and CloudWatch for continuous monitoring.</li><li>Network Security — Implement VPC security controls, NACLs, security groups, WAF, Shield, and private connectivity patterns.</li><li>Data Protection — Enforce encryption standards using KMS, Secrets Manager, and secure storage configurations.</li><li>Incident Response — Lead cloud-focused incident investigations, forensics, and remediation activities.</li><li>Compliance &amp; Governance — Ensure alignment with standards such as ISO 27001, NIST, SOC 2, and regional regulations relevant to Dubai/UAE.</li><li>Automation &amp; DevSecOps — Build automated security controls using Terraform, CloudFormation, or CI/CD pipelines.</li><li>Vulnerability Management — Run regular assessments, patching workflows, and container security checks.</li><li>Security Documentation — Maintain policies, runbooks, and architecture diagrams.<br><br></li></ul><strong>Required Skills &amp; Qualifications<br><br></strong><ul><li>AWS Security Expertise — Deep knowledge of core services: EC2, S3, RDS, Lambda, VPC, IAM, KMS, CloudTrail, GuardDuty, WAF, Shield.</li><li>Infrastructure as Code — Experience with Terraform or CloudFormation for secure provisioning.</li><li>Scripting &amp; Automation — Proficiency in Python, Bash, or PowerShell.</li><li>Container Security — Familiarity with securing Docker, Kubernetes, and AWS EKS.</li><li>Zero Trust Principles — Ability to apply Zero Trust models in cloud environments.</li><li>Security Certifications — Preferred: AWS Security Specialty, CISSP, CCSP, CEH.</li><li>Strong understanding of networking, encryption, authentication, and cloud threat modeling.<br><br></li></ul><strong>Our promise to talent<br><br></strong>At Property Finder, we believe talent thrives in an environment where you can be your best self. Where you are empowered to create, elevate, grow, and care. Our team is made up of the best and brightest, united by a shared ambition to change living for good in the region. We attract top talent who want to make an impact. We firmly believe that when our people grow, we all succeed.<br><br><strong>Property Finder Guiding Principles<br><br></strong><ul><li>Think Future First</li><li>Data Beats Opinions, Speed Beats Perfection</li><li>Optimise for Impact</li><li>Act Like An Owner</li><li>The Biggest Risk is Taking no Risk at All<br><br></li></ul><strong>Find Us At<br><br></strong>Twitter<br><br>Facebook<br><br>Instagram<br><br>Linkedin<br><br>Glassdoor

Property Finder is the leading property portal in the Middle East and North Africa (MENA) region, dedicated to shaping an inclusive future for real estate while spearheading the region’s growing tech ecosystem. At its core is a clear and powerful purpose: To change living for good in the region.<br><br>Founded on the value of great ambitions, Property Finder connects millions of property seekers with thousands of real estate professionals every day. The platform offers a seamless and enriching experience, empowering both buyers and renters to make informed decisions. Since its inception in 2007, Property Finder has evolved into a trusted partner for developers, brokers, and home seekers. As a lighthouse tech company, it continues to create an environment where people can thrive and contribute meaningfully to the transformation of real estate in MENA.<br><br><strong>Role Overview<br><br></strong>The Cloud Security Engineer is responsible for designing, implementing, and maintaining security controls across AWS environments. This role ensures that cloud workloads, data, identities, and infrastructure remain secure, compliant, and resilient against evolving threats. The engineer works closely with DevOps and Engineering teams to embed security into every layer of the cloud ecosystem.<br><br><strong>Key Responsibilities<br><br></strong><ul><li>Cloud Security Architecture — Design and implement secure AWS architectures using best-practice frameworks such as the AWS Well-Architected Security Pillar.</li><li>Identity &amp; Access Management — Configure and manage IAM roles, policies, permission boundaries, and least-privilege access models.</li><li>Threat Detection &amp; Monitoring — Deploy and tune services like GuardDuty, Security Hub, CloudTrail, and CloudWatch for continuous monitoring.</li><li>Network Security — Implement VPC security controls, NACLs, security groups, WAF, Shield, and private connectivity patterns.</li><li>Data Protection — Enforce encryption standards using KMS, Secrets Manager, and secure storage configurations.</li><li>Incident Response — Lead cloud-focused incident investigations, forensics, and remediation activities.</li><li>Compliance &amp; Governance — Ensure alignment with standards such as ISO 27001, NIST, SOC 2, and regional regulations relevant to Dubai/UAE.</li><li>Automation &amp; DevSecOps — Build automated security controls using Terraform, CloudFormation, or CI/CD pipelines.</li><li>Vulnerability Management — Run regular assessments, patching workflows, and container security checks.</li><li>Security Documentation — Maintain policies, runbooks, and architecture diagrams.<br><br></li></ul><strong>Required Skills &amp; Qualifications<br><br></strong><ul><li>AWS Security Expertise — Deep knowledge of core services: EC2, S3, RDS, Lambda, VPC, IAM, KMS, CloudTrail, GuardDuty, WAF, Shield.</li><li>Infrastructure as Code — Experience with Terraform or CloudFormation for secure provisioning.</li><li>Scripting &amp; Automation — Proficiency in Python, Bash, or PowerShell.</li><li>Container Security — Familiarity with securing Docker, Kubernetes, and AWS EKS.</li><li>Zero Trust Principles — Ability to apply Zero Trust models in cloud environments.</li><li>Security Certifications — Preferred: AWS Security Specialty, CISSP, CCSP, CEH.</li><li>Strong understanding of networking, encryption, authentication, and cloud threat modeling.<br><br></li></ul><strong>Our promise to talent<br><br></strong>At Property Finder, we believe talent thrives in an environment where you can be your best self. Where you are empowered to create, elevate, grow, and care. Our team is made up of the best and brightest, united by a shared ambition to change living for good in the region. We attract top talent who want to make an impact. We firmly believe that when our people grow, we all succeed.<br><br><strong>Property Finder Guiding Principles<br><br></strong><ul><li>Think Future First</li><li>Data Beats Opinions, Speed Beats Perfection</li><li>Optimise for Impact</li><li>Act Like An Owner</li><li>The Biggest Risk is Taking no Risk at All<br><br></li></ul><strong>Find Us At<br><br></strong>Twitter<br><br>Facebook<br><br>Instagram<br><br>Linkedin<br><br>Glassdoor

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p>Property Finder is the leading property portal in the Middle East and North Africa (MENA) region, dedicated to shaping an inclusive future for real estate while spearheading the region’s growing tech ecosystem. At its core is a clear and powerful purpose: To change living for good in the region.</p><br><p>Founded on the value of great ambitions, Property Finder connects millions of property seekers with thousands of real estate professionals every day. The platform offers a seamless and enriching experience, empowering both buyers and renters to make informed decisions. Since its inception in 2007, Property Finder has evolved into a trusted partner for developers, brokers, and home seekers. As a lighthouse tech company, it continues to create an environment where people can thrive and contribute meaningfully to the transformation of real estate in MENA.</p><br><br><p><span><strong>Role Overview</strong></span></p><br><p><span>The Cloud Security Engineer is responsible for designing, implementing, and maintaining security controls across AWS environments. This role ensures that cloud workloads, data, identities, and infrastructure remain secure, compliant, and resilient against evolving threats. The engineer works closely with DevOps and Engineering teams to embed security into every layer of the cloud ecosystem.</span></p><br><p><span><strong>Key Responsibilities</strong></span></p><br><ul><li><p><span><strong>Cloud Security Architecture</strong> — Design and implement secure AWS architectures using best-practice frameworks such as the AWS Well-Architected Security Pillar.</span></p><br></li><li><p><span><strong>Identity &amp; Access Management</strong> — Configure and manage IAM roles, policies, permission boundaries, and least-privilege access models.</span></p><br></li><li><p><span><strong>Threat Detection &amp; Monitoring</strong> — Deploy and tune services like GuardDuty, Security Hub, CloudTrail, and CloudWatch for continuous monitoring.</span></p><br></li><li><p><span><strong>Network Security</strong> — Implement VPC security controls, NACLs, security groups, WAF, Shield, and private connectivity patterns.</span></p><br></li><li><p><span><strong>Data Protection</strong> — Enforce encryption standards using KMS, Secrets Manager, and secure storage configurations.</span></p><br></li><li><p><span><strong>Incident Response</strong> — Lead cloud-focused incident investigations, forensics, and remediation activities.</span></p><br></li><li><p><span><strong>Compliance &amp; Governance</strong> — Ensure alignment with standards such as ISO 27001, NIST, SOC 2, and regional regulations relevant to Dubai/UAE.</span></p><br></li><li><p><span><strong>Automation &amp; DevSecOps</strong> — Build automated security controls using Terraform, CloudFormation, or CI/CD pipelines.</span></p><br></li><li><p><span><strong>Vulnerability Management</strong> — Run regular assessments, patching workflows, and container security checks.</span></p><br></li><li><p><span><strong>Security Documentation</strong> — Maintain policies, runbooks, and architecture diagrams.</span></p><br></li></ul><p><span><strong>Required Skills &amp; Qualifications</strong></span></p><br><ul><li><p><span><strong>AWS Security Expertise — </strong>Deep knowledge of core services: EC2, S3, RDS, Lambda, VPC, IAM, KMS, CloudTrail, GuardDuty, WAF, Shield.</span></p><br></li><li><p><span><strong>Infrastructure as Code —</strong> Experience with Terraform or CloudFormation for secure provisioning.</span></p><br></li><li><p><span><strong>Scripting &amp; Automation — </strong>Proficiency in Python, Bash, or PowerShell.</span></p><br></li><li><p><span><strong>Container Security — </strong>Familiarity with securing Docker, Kubernetes, and AWS EKS.</span></p><br></li><li><p><span><strong>Zero Trust Principles — </strong>Ability to apply Zero Trust models in cloud environments.</span></p><br></li><li><p><span><strong>Security Certifications —</strong> Preferred: AWS Security Specialty, CISSP, CCSP, CEH.</span></p><br></li><li><p><span>Strong understanding of networking, encryption, authentication, and cloud threat modeling.</span></p><br></li></ul><strong>Our promise to talent</strong><p>At Property Finder, we believe talent thrives in an environment where you can be your best self. Where you are empowered to create, elevate, grow, and care. Our team is made up of the best and brightest, united by a shared ambition to change living for good in the region. We attract top talent who want to make an impact. We firmly believe that when our people grow, we all succeed.</p><br><strong>Property Finder Guiding Principles</strong><ol><li><p>Think Future First</p><br></li><li><p>Data Beats Opinions, Speed Beats Perfection</p><br></li><li><p>Optimise for Impact</p><br></li><li><p>Act Like An Owner</p><br></li><li><p>The Biggest Risk is Taking no Risk at All</p><br></li></ol><br><br><br><br><br><br><br><strong>Find us at:</strong><br><br>TwitterFacebookInstagramLinkedinGlassdoor <br> </div>

<br><br><strong>Role&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : Head of IS Risk Management<br></strong> <strong>Location :</strong> Abu Dhabi<br><br> <strong>Role Purpose:<br><br></strong> Purpose of this role is to ensure&nbsp;managing and overseeing the full spectrum of information security risk management while ensuring completion of review of the risk management framework to cater for the Group’s needs and requirements. It additionally involves identifying, assessing, and treating&nbsp;risks&nbsp;to the confidentiality, integrity, and availability of ADIB’s assets.<br> &nbsp;&nbsp;&nbsp;&nbsp;<br> <strong>Key Accountabilities of the role&nbsp;&nbsp;<br><br></strong> <ul> <li><p>Manage and supervise cybersecurity risk assessment for business services, processes, and technologies.</p></li> <li><p>Stay abreast of global and regional information security threats by reviewing threat intelligence reports from Group Information Security Department’s (GISD) Cyber Threat Intelligence unit and reflect findings while identifying risks</p></li> <li><p>Reviewing security/vulnerabilities assessments and penetration testing reports delivered by GISD’s Attack Surface Reduction unit, and reflecting findings while identifying risks</p></li> <li><p>Identify and prioritize risk scenarios and report to management.</p></li> <li><p>Ensure proper delivery of ad-hoc and planned risk assessments in accordance with internal information security policies and requirements or external information security regulations and standards</p></li> <li><p>Oversee and manage risk monitoring plans and collaborate with relevant business units to ensure an effective implementation of mitigation controls</p></li> <li><p>Manage the implementation of systems and tools to automate the end-to-end information security risk management cycle</p></li> <li><p>Work with the Head of IS Governance and Risk Management for the continuous improvements in policies, procedures, standards, and guidelines in line with risk&nbsp;assessment findings and recommendations</p></li> <li><p>Present management reports highlighting the Group’s risk status and posture</p></li> <li><p>Supervise information security related projects such as security integration into coding and testing to assess the associated information security risks</p></li> <li><p>Finalize and confirm report on risk management KPIs</p></li> <li><p>Identify initiatives with Head of IS Governance and Risk Management to continuously improve risk performance and develop remediation steps that help the Group entities reduce the risk to an acceptable level, comply with applicable laws and regulations, increase operational efficiency, and meet IS goals and objectives</p></li> <li><p>Participate in communicating risk status to relevant internal / external stakeholders as well as risk remediation plans to relevant stakeholders and follow up on their implementation</p></li> <li><p>Improve/develop QA routines and controls to ensure appropriate focus on risk reduction within defined timelines.</p></li> <li>Measure, monitor, and report on information security risks.&nbsp;</li> <li>Review and report on vendor/third party risk supporting vendor risk management activities.</li> <li>Engage staff and/or vendors to develop information security risk mitigation plans to address risks identified in Vendor risk reviews.&nbsp;</li> <li>Monitor and report on information security risk mitigation plans to ensure timely execution.</li> <li>Engage employees in the management of information security risk and ensure they are aware of their accountabilities regarding information security risk management.</li> <li>Regularly assess and report to management any exceptions to information risk management policies, procedures and limits&nbsp;</li> <li>Align with VA/PT team to validate IS Risks.</li> <li>Alignment with ORM, ITD, BCM, VCMP and any other relevant stakeholders.</li> <li>Develop strategic, tactical and operational risk dashboard reports.</li> <li>Develop Threat Modelling Process that utilizes quantitative and qualitative risk management measures.&nbsp;<br> &nbsp;</li> </ul> <br><br><strong>Specialist Skills / Technical Knowledge Required for this role:<br><br></strong> <ul> <li><p>Strong knowledge of banking and financial institutions processes and modus operandi,&nbsp;information security technologies, processes, and systems</p></li> <li>Bachelor’s degree (master’s degree preferred) in technology or related field or equivalent years of relevant work experience is required&nbsp;</li> <li>Experience in banking and financial service sector preferred&nbsp;</li> <li> <br><br>Good business and supervisory acumen</li> <li> <br><br>Familiar with GRC tools and other risk management platforms</li> <li> <br><br>Knowledge of ISO 27001, NESA, SWIFT CSP, PCI DSS and other information security standards and regulations</li> <li> <br><br>Certified Information Systems Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) Certifications are strongly preferred.<br> &nbsp;</li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Role : Head of IS Risk Management</strong><br><strong>Location :</strong> Abu Dhabi<br><strong>Role Purpose:</strong><br><span><span>Purpose of this role is to ensure&nbsp;</span></span><span><span>managing and overseeing the full spectrum of information security risk management while ensuring completion of review of the risk management framework to cater for the Group’s needs and requirements. It additionally involves identifying, assessing, and treating&nbsp;risks&nbsp;to the confidentiality, integrity, and availability of ADIB’s assets.</span></span><br> <br><strong>Key Accountabilities of the role </strong></p><br><ul><li><p><span><span>Manage and supervise cybersecurity risk assessment for business services, processes, and technologies.</span></span></p><br></li><li><p><span><span>Stay abreast of global and regional information security threats by reviewing threat intelligence reports from Group Information Security Department’s (GISD) Cyber Threat Intelligence unit and reflect findings while identifying risks</span></span></p><br></li><li><p><span><span>Reviewing security/vulnerabilities assessments and penetration testing reports delivered by GISD’s Attack Surface Reduction unit, and reflecting findings while identifying risks</span></span></p><br></li><li><p><span><span>Identify and prioritize risk scenarios and report to management.</span></span></p><br></li><li><p><span><span>Ensure proper delivery of ad-hoc and planned risk assessments in accordance with internal information security policies and requirements or external information security regulations and standards</span></span></p><br></li><li><p><span><span>Oversee and manage risk monitoring plans and collaborate with relevant business units to ensure an effective implementation of mitigation controls</span></span></p><br></li><li><p><span><span>Manage the implementation of systems and tools to automate the end-to-end information security risk management cycle</span></span></p><br></li><li><p><span><span>Work with the Head of IS Governance and Risk Management for the continuous improvements in policies, procedures, standards, and guidelines in line with risk&nbsp;assessment findings and recommendations</span></span></p><br></li><li><p><span><span>Present management reports highlighting the Group’s risk status and posture</span></span></p><br></li><li><p><span><span>Supervise information security related projects such as security integration into coding and testing to assess the associated information security risks</span></span></p><br></li><li><p><span><span>Finalize and confirm report on risk management KPIs</span></span></p><br></li><li><p><span><span>Identify initiatives with Head of IS Governance and Risk Management to continuously improve risk performance and develop remediation steps that help the Group entities reduce the risk to an acceptable level, comply with applicable laws and regulations, increase operational efficiency, and meet IS goals and objectives</span></span></p><br></li><li><p><span><span>Participate in communicating risk status to relevant internal / external stakeholders as well as risk remediation plans to relevant stakeholders and follow up on their implementation</span></span></p><br></li><li><p><span><span>Improve/develop QA routines and controls to ensure appropriate focus on risk reduction within defined timelines.</span></span></p><br></li><li><span><span>Measure, monitor, and report on information security risks.&nbsp;</span></span></li><li><span><span>Review and report on vendor/third party risk supporting vendor risk management activities.</span></span></li><li><span><span>Engage staff and/or vendors to develop information security risk mitigation plans to address risks identified in Vendor risk reviews.&nbsp;</span></span></li><li><span><span>Monitor and report on information security risk mitigation plans to ensure timely execution.</span></span></li><li><span><span>Engage employees in the management of information security risk and ensure they are aware of their accountabilities regarding information security risk management.</span></span></li><li><span><span>Regularly assess and report to management any exceptions to information risk management policies, procedures and limits&nbsp;</span></span></li><li><span><span>Align with VA/PT team to validate IS Risks.</span></span></li><li><span><span>Alignment with ORM, ITD, BCM, VCMP and any other relevant stakeholders.</span></span></li><li><span><span>Develop strategic, tactical and operational risk dashboard reports.</span></span></li><li><span><span>Develop Threat Modelling Process that utilizes quantitative and qualitative risk management measures.&nbsp;</span></span><br>&nbsp;</li></ul><p><strong>Specialist Skills / Technical Knowledge Required for this role:</strong></p><br><ul><li><p><span><span>Strong knowledge of banking and financial institutions processes and modus operandi,&nbsp;</span><span>information security technologies, processes, and systems</span></span></p><br></li><li><span><span>Bachelor’s degree (master’s degree preferred) in technology or related field or equivalent years of relevant work experience is required&nbsp;</span></span></li><li><span><span>Experience in banking and financial service sector preferred&nbsp;</span></span></li><li><p><span><span>Good business and supervisory acumen</span></span></p><br></li><li><p><span><span>Familiar with GRC tools and other risk management platforms</span></span></p><br></li><li><p><span><span>Knowledge of ISO 27001, NESA, SWIFT CSP, PCI DSS and other information security standards and regulations</span></span></p><br></li><li><p><span><span>Certified Information Systems Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) Certifications are strongly preferred.</span></span><br>&nbsp;</p><br></li></ul><br> </div>

In this role you will provide software security test quality assurance support to software development teams. This role will ensure that SW scrum teams follow the defined software security development Lifecyle process and conformance to related regulations and related industry standards. As a member of the software test &amp; QA department, you will work with the team to implement continuous improvement to the software security process, monitor the health of implemented software systems and provide guidance to scrum teams. As a key member of the software test &amp; QA department, the individual in this role will be responsible for ensuring compliance to Dyson software security quality policies and procedures.<br><br>We work in a supportive environment where the team embraces new techniques to improve itself and grow capability. We’re looking for someone who shares this ethic, expresses a desire to develop Security test strategies across different platforms (Lighting, Environmental, Hair and Robotics). You must be aware of SW verification methodologies and techniques, ideally with a background in Security testing, comfortable with high-level design and discussions with Developers.<br><br><strong>Key Responsibilities<br><br></strong><ul><li>Implementing, testing, and operating advanced software security techniques in compliance with technical reference architecture</li><li>Perform on-going software security pen-test, code review activities to improve software security, both automated and manual to identify and exploit vulnerabilities in IOT consumer products.</li><li>Define pen-test methodologies with a combination of automated and manual tools.</li><li>Agree the desired Security Level with the organisation, reviewing Requirements to build Tests</li><li>Build Automated systems to support continuous testing and analysis of nightly builds</li><li>Contribute to the design, development, implementation, and integration of Offensive Cyber Operations tools against platforms, payloads &amp; systems</li><li>Proactively identify security risk, provide engineering designs for new software solutions to help mitigate security vulnerabilities</li><li>Work in a SAFe Agile team across a global organisation</li><li>Consult team members on software secure coding practices</li><li>Develop a familiarity with new tools and best practices<br><br><br></li></ul><strong>Qualifications, Skills And Behaviours<br><br></strong><ul><li>Cyber security, including penetration, security posture assessment, cloud security assessment, IOT security, vulnerability analysis, risk assessment and so on related experience</li><li>Experience using scan / attack / assess tools and techniques</li><li>Competency in at least one scripting or coding language, python, C, C++</li><li>In-depth knowledge with wireless protocols, Wi-Fi, Bluetooth. JTAG and USB</li><li>Proficiency in Security concepts for IOT, Linux and RTOS Operating Systems</li><li>Test Management Systems, Jira, Confluence, Stash, Git, Bamboo</li><li>Providing critical input at all stages of design and development of a new feature</li><li>Persistent nature, inquisitive attitude and results driven.</li><li>Creative and product focussed ability to generate numerous concepts for new technologies</li><li>&gt;3 years software quality or software test relevant experience.</li><li>Bachelor’s Degree in computer engineering / Electronic Engineering, or related fields.</li><li>Knowledge of software in IOT products, such as embedded, app, cloud and so on.</li><li>Experience in regulated environment, such as ISO, IEC, FDA and so on standards,</li><li>Experience working in with Agile software development, Devops environment</li><li>Excellent attention to detail, strong communication skill, and ability to work independently and in teams.</li><li>Able to work in fast-paced environment and delivery quality under minimal supervision</li><li>Able to understand software security development Lifecyle.</li><li>Good understanding of statistical process control. Able to select, define, and apply product and process metrics and analytical techniques, and communicate results.</li><li>Advance with CREST certified<br><br><br></li></ul>Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> About the role<br> Yallo is hiring a Senior Security Business Analyst for a leading Dubai-based retail group client. The client is running a major SAP ERP transformation. You will sit in the programme’s security workstream and turn security requirements into clear, traceable business and technical requirements. You’ll keep every risk, control, action and piece of evidence linked from design through to go-live.<br> <br> This role suits a BA who works independently, runs workshops with confidence and is comfortable with security terminology.<br> <br> What you’ll do<br> <br> Run workshops with security specialists, business stakeholders and delivery partners to gather and clarify requirements<br> Turn security requirements into clear business, functional and technical requirements, each with acceptance criteria<br> Keep end-to-end traceability between risks, controls, requirements, remediation actions and evidence<br> Track evidence submissions and map each one to the right requirement or control before it goes for assurance<br> Maintain action registers, decision logs, dependencies and milestones for the security remediation plan<br> Spot gaps, inconsistencies and dependencies early, and drive them to resolution<br> Prepare workstream reports and governance material<br> What you’ll bring<br> <br> 6–10 years as a Business Analyst, including at least 2–3 years on security, technology risk or GRC projects<br> Strong requirements management and traceability skills across the full delivery lifecycle<br> Working knowledge of security controls and principles, so you can follow security conversations and translate them<br> Experience on complex programmes with many business, technology and third-party stakeholders<br> Structured and detail-focused, able to manage a large volume of requirements and actions accurately<br> Clear written and verbal communication with both technical and non-technical audiences<br> SAP or ERP programme experience, and familiarity with ISO 27001 or NIST CSF, are an advantage<br> </div><h2 class="h5">Skills</h2> <div data-jb-field="skills">6–10 years as a Business Analyst, including at least 2–3 years on security, technology risk or GRC projects<br> Strong requirements management and traceability skills across the full delivery lifecycle<br> Working knowledge of security controls and principles, so you can follow security conversations and translate them<br> Experience on complex programmes with many business, technology and third-party stakeholders<br> Structured and detail-focused, able to manage a large volume of requirements and actions accurately<br> Clear written and verbal communication with both technical and non-technical audiences<br> SAP or ERP programme experience, and familiarity with ISO 27001 or NIST CSF, are an advantage<br> </div>

<ul><li>Conduct thorough risk assessments to identify vulnerabilities and recommend appropriate security measures for timely mitigation.</li><li>Develop and implement security policies and procedures that adhere to industry standards and regulatory requirements, ensuring organizational compliance.</li><li>Monitor network traffic for suspicious activity, utilizing advanced tools to detect and respond to potential threats in real-time.</li><li>Lead incident response efforts by investigating security breaches, documenting findings, and providing actionable recommendations for prevention.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li><p>Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline, or equivalent practical experience.</p></li><li><p>Practical experience in cybersecurity engineering, security operations, or infrastructure security.</p></li><li><p>Configure and maintain security controls across networks, firewalls, VPNs, and Windows and Linux environments.</p></li><li><p>Relevant certifications such as CompTIA Security+, CCNA, CySA+, or Microsoft/AWS security certifications.</p></li><li><p>Experience with SIEM, endpoint detection and response, and automated incident response tools.</p></li><li><p>Experience supporting governance, risk, and compliance activities.</p></li><li><p>secure cloud environments, including Microsoft Azure and/or AWS, in line with shared responsibility models.</p></li></ul>

<strong>Job Description<br><br></strong>This role ensures that cyber security risks to etisalat critical infrastructure, revenue-generating services, and sensitive data are effectively identified, assessed, governed, and communicated, in alignment with the business objectives, regulatory requirements, and international standards. The position provides strategic leadership and direction to strengthen the etisalat resilience against cyber threats and support the organization’s digital ambitions.<br><br><strong>Responsibilities<br><br></strong><ul><li>Develop, implement, and continuously enhance the Cyber Security Risk Governance framework, policies, and standards in line with e&amp; business strategy, regulatory obligations, and leading international practices (e.g., ISO 27001, NIST, etc.).</li><li>Establish and maintain risk appetite, risk tolerance levels, and governance mechanisms for cyber security.</li><li>Oversee the identification, assessment, analysis, and prioritization of cyber risks across Etisalat’s critical infrastructure.</li><li>Ensure that appropriate risk treatment plans, controls, and mitigation strategies are defined, implemented, and monitored to protect critical assets and services from cyber threats and attacks.</li><li>Ensure adherence to applicable national regulations, telecom and sector-specific requirements, and relevant international standards related to cyber security risk management.</li><li>Define and govern risk-based cyber security policies, procedures, and control frameworks to maintain compliance and reduce residual risk to acceptable levels.</li><li>Lead and coordinate cross-functional teams to drive a unified approach to cyber security risk governance.</li><li>Promote consistent risk management practices, fostering collaboration and alignment between technical teams, business units, and support functions.</li><li>Translate complex cyber security risks into clear, concise business terms for Senior Management and key stakeholders, enabling informed decision-making.</li><li>Periodically present the e&amp; Cyber Security Risk Profile to the senior management.</li><li>Drive continuous improvement initiatives in risk assessment methodologies, governance processes, and reporting mechanisms to enhance overall cyber resilience.</li><li>Lead, mentor, and develop the Cyber Security Risk Governance team, ensuring that the function has the necessary skills, capabilities, and tools to perform effectively.</li><li>Foster a strong risk-aware and security-conscious culture across the organization through guidance, awareness, and engagement with stakeholders.</li><li>Monitor and analyze global cyber security trends, threats, and regulatory requirements to inform strategic decisions.</li><li>Detailed understanding of security architecture / design best practices, processes, risk assessment, planning, project management, documentation and presentation.</li><li>Must possess the ability to conduct risk assessments of services including identification of threats, threat actors, vulnerabilities and their impacts.</li><li>Conduct comprehensive risk assessments to identify all issues and track them via implementing risk management methodologies.</li><li>Understand, develop, support, and apply a risk management framework in projects.</li><li>Perform security gap-analysis across projects, applications and vendors, documenting remediation plans.<br><br></li></ul><strong>Qualifications<br><br></strong><ul><li>Bsc. in Cyber Security / Computer Engineering</li><li>CISSP, CRISC</li><li>Hands-on experience in developing policies, standards and guidelines.</li><li>Possess knowledge of various telecom and IT standards such as ITU, ETSI, ISO, SIA, GSM, 3GPP, etc.</li><li>Possess knowledge of various security OEM technologies and controls including but not limited to GRC, UTM, IPS/IDS, WAF, SIEM, IAM, PAM, DDoS, AEP, NDR, EDR, etc.</li><li>Must have excellent communication and presentation skills.</li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span></span><p><span>This role reports to the Head of Security and Stakeholder and give administrative assistance to the Security&nbsp;and Stakeholder Department</span></p><br><p><span><span><strong>KEY RESPONSIBILITIES</strong></span></span></p><br> <p><span><span><strong>Strategic</strong></span></span></p><br> <ul> <li>Act as Security and Stakeholder Relations Department first point of contact with people from both&nbsp;inside and outside the organization.</li> <li>Perform and carry out duties as instructed/ directed by the Head of Security and Stakeholder&nbsp;Relations.</li> <li>Keep track of Security and Stakeholder Relations staff records including contact details and&nbsp;emergency contact details.</li> </ul> <p><span><span><strong>Financial</strong></span></span></p><br> <ul> <li>Manage the petty cash of the Security team under the supervision of the Security managers.</li> </ul> <p><strong>Stakeholder / Customer</strong></p><br> <ul> <li><span>Issuing the staff depot car pass of Dubai Metro and Tram to New Joiners, Existing employee,&nbsp;Contractor/Third Parties and etc.</span></li> <li><span>Responsible in scheduling meetings, taking minutes of the meeting and ensure that action register is always updated and TOR is in place including:<br>● ESIG Meeting.<br>● Multimodal Meeting.<br>● Rail Agency Security Committee Meeting<br>● KM Security Meeting with FSG-Security<br>● Any other required meetings within the department.</span></li> <li><span>Responsible for maintaining records of all documents received from the Training Department.</span></li> <li><span>To act as the Aconex Administrator for Stakeholder Relations and Security Department:<br>● Monitoring correspondence.<br>● Assisting in drafting responses.</span></li> <li><span>Liaise with the contractor about the invoices and other document requirement.</span></li> </ul> <p><span><span><strong>Operational</strong></span></span></p><br> <ul> <li>The Security and Stakeholder Administrator will be responsible for providing administrative and clerical&nbsp;support to the Security and Stakeholder Relations Team.</li> <li>Managing the calendar of the Security and Stakeholder Relations Team.</li> <li>Registering of associated details in the appropriate database(s).</li> <li>Co-ordinate with all concerned parties to ensure an efficient level of general office support activities –&nbsp;e.g. filing, diary keeping, stationery, meeting rooms management, procurement requisitions.</li> <li>Assist the Security and Stakeholder Relations Department in complying with documentary&nbsp;requirements, process requests by acquiring proper signature and submit relevant parties.</li> <li>Responsible for monitoring attendance, overtime, annual leave and sick leaves</li> <li>Facilitating the request of the Security and Stakeholder Team liaise with the contact person (work&nbsp;related to IT, procurement, facilities and cleaning, document review, etc.)</li> <li>Gathering the information about the challenges in security perspective from the Security and&nbsp;Stakeholder managers to prepare the meeting material of the Bi-weekly meeting</li> <li>Providing the security incidents related to unauthorised access and unsecured restricted area to&nbsp;Performance and Planning Team.</li> <li>To perform as Dynamics 365 user:<br>● Raising purchase requisition.<br>● Generate Accrual reports.<br>● Process reimbursement via Claim forms.</li> <li>To perform as Q-pulse user.<br>● Preparation of the draft, Document Change request form and Briefing Note form.<br>● Communicate with the reviewer to check and confirm the changes of the details..</li> <li>Compiling the Executive Monthly reports with the details provided by the Security Team and Tram&nbsp;Management Team.</li> <li>Coordinate with IT department about issues related to IT Programs and system.</li> <li>Sub-admin to Sharedrive folders of the Security and Stakeholder team.</li> <li>Ensure compliance with the Keolis-MHI Management System and all relevant business processes,&nbsp;procedures and work instructions to deliver all work with appropriate quality and governance standards.</li> <li>Ensure compliance with all training requirements of Keolis-MHI and ensure adherence to these&nbsp;requirements at all times whilst in employment.</li> <li>Perform other duties as required by the Head of Security and Stakeholder Relations or/and Chief&nbsp;Operation Officer.</li> </ul> <p><span><span><strong>Capability /People</strong></span></span></p><br> <ul> <li>Coordinates company events including team building, away day, annual event, briefings/presentations&nbsp;to make sure it runs smoothly and successfully.</li> <li>To exercise personal duty of care for their own health, safety and welfare and for those affected by&nbsp;their acts or omissions; reference Keolis-MHI organisational HSE responsibilities.</li> </ul> <p><span><span><strong>MINIMUM QUALIFCATIONS</strong></span></span></p><br> <p>Min.</p><br> <p>Required</p><br> <p>Desirable</p><br> <br> <p><span>Education</span></p><br> <p>A bachelor degree holder in Business Administration and/or <span>relevant professional qualifications</span></p><br> <br> <p><span>Experience</span></p><br> <p>A minimum of 3 years as an Administrator.</p><br> <br> <p><span>Skills /<br>Training<br></span></p><br> <p>● Excellent level of English comprehension, spoken and<br>writing skills and in numeracy skills required to take<br>minutes, prepare, edit, proof read letters, reports, etc.<br>● Excellent communication and influencing skills.<br>● Familiar and excellent in using Microsoft 365.<br>● Highly organised and methodical in approach to work.<br>● Motivated and flexible to work in a time-sensitive<br>environment to respond quickly and effectively to<br>unanticipated high workloads, events and emergencies.<br>● Ability to liaise in a professional and persuasive manner<br>with staff including RTA, Dubai Police etc. at all levels in<br>the organization.<br>● A dynamic, high energy individual who can support<br>several groups/sections within a department.<br>● A mature and responsible approach to work and use<br>initiative to solve problems and be able to liaise in a<br>professional and persuasive manner with staff at all<br>levels in the organisation.<br>● Strong organisational skills, detail oriented, and the<br>ability to handle multiple priorities.<br>● Ability to maintain confidentiality in handling highly<br>sensitive, confidential and non-routine information<br>● Arabic speaker is an advantage</p><br> <p><strong>Training</strong><br>● Risk Assessor Training<br>● Q-Pulse<br>● Microsoft 365 (Outlook, Word, Excel, PowerPoint,<br>Dynamics 365, etc.)<br>● KM Leadership Program<br>● People management</p><br> <br> </div>

<strong>Overview<br><br></strong>The Lead SOC Analyst is responsible for managing the day-to-day activities of the SOC Monitoring, Incident Detection, and Response Operations. The role involves collaborating with internal and client teams to identify and respond to threats and vulnerabilities and providing technical expertise and guidance to support incident response efforts. This position requires strong technical expertise, leadership skills, and the ability to mentor and develop team members.<br><br><strong>Responsibilities<br><br></strong><strong>SOC Operations Management:<br><br></strong><ul><li>Lead and manage daily SOC activities and ensure efficient monitoring of security systems.</li><li>Oversee the triage, investigation, and resolution of security incidents.</li><li>Ensure incident handling aligns with defined SLAs and escalation procedures.<br><br></li></ul><strong>Incident Response &amp; Threat Management<br><br></strong><ul><li>Coordinate and lead incident response efforts.</li><li>Analyze and respond to complex threats using threat intelligence and advanced detection techniques.</li><li>Oversee triage, investigation, and remediation of security events an incident.</li><li>Lead major incident investigations and coordinate with other teams such as Incident Response, Threat Hunting, and CTI functions.<br><br></li></ul><strong>Team Leadership &amp; Development<br><br></strong><ul><li>Mentor and guide SOC analysts.</li><li>Conduct training sessions and promote continuous learning.<br><br></li></ul><strong>Security Tools &amp; SIEM Management<br><br></strong><ul><li>Manage and optimize SIEM tools and other security technologies.</li><li>Ensure effective integration of tools for comprehensive monitoring.</li><li>Correlate security events from SIEM, EDR, Firewall, IDS/IPS etc.</li><li>Validate and fine tune detection rules, correlation searches, and threat models.</li><li>Identify automation opportunities to reduce mean time to detect (MTTD) and mean time to respond (MTTR).<br><br></li></ul><strong>Threat Hunting &amp; Vulnerability Management<br><br></strong><ul><li>Proactively identify threats lurking in the environment by conducting threat hunting exercises.</li><li>Oversee vulnerability scanning and patch management.</li><li>Work closely with CTI and Threat Hunters to integrate IOCs, TTPs, and MITRE ATT&amp;CK coverage to enhance detection posture overall.<br><br></li></ul><strong>Reporting &amp; Compliance<br><br></strong><ul><li>Generate detailed reports on incidents, trends, and SOC performance.</li><li>Ensure compliance with industry standards and regulatory requirements.</li><li>Provide regular operational metrices and incident reports to senior management.<br><br></li></ul><strong>Collaboration &amp; Strategy<br><br></strong><ul><li>Work closely with IT, Cloud, Application, Risk, and Security teams for cross-functional incident handling.</li><li>Contribute to the development of security policies and procedures.</li><li>Highly result oriented and able to work independently.</li><li>Good analytical, technical, written, and verbal communication skills.</li><li>Ability to multi-task in a fast-paced and demanding work environment.</li><li>Comfortable with a high-tech work environment and constantly learning new tools and innovations.</li><li>Self-motivated, curious, and knowledgeable ab information security news and current events.<br><br></li></ul><strong>Qualifications<br><br></strong>Bachelor’s degree in engineering, computer science, information systems, or quantitative fields.<br><br><ul><li>ISC² Certified Information Systems Security Professional (CISSP)</li><li>CISM Certified Information Security Manager</li><li>GIAC Certifications</li><li>Minimum of 10+ years’ relevant experience or working in a large-scale ICT environment focused on Information/Cyber Security.</li><li>High-level understanding of TCP/IP protocol and OSI Seven Layer Mode.</li><li>Knowledge of security best practices and concepts.</li><li>Knowledge of Windows and/or Unix-based systems/architectures and related security.</li><li>Sound level of knowledge of LAN/WAN technologies.</li><li>Must have a solid understanding of information technology and information security.</li><li>Expertise in incident response and handling methodologies.</li><li>Knowledge of Cyber kill chain, blockchain, and other IR frameworks.</li><li>Knowledge of Defense-in-depth techniques.</li><li>Knowledge of security event correlation and analytics tools.</li><li>Skill in recognizing and categorizing types of vulnerabilities and associated attacks.</li><li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, covert channel, replay attacks, malicious code).</li><li>Knowledge of which system files (e.g., log files, registry files, and configuration files) contain relevant information and where to find those system files.</li><li>Experience with SIEM tool – preferably proficient with developing correlation rules, dashboards, and custom searches.</li><li>Experience with automated incident response tools (PSTools, Sysmon, Carbon Black, etc.).</li><li>Experience with packet capture and analysis (tcpdump/windump, Wireshark, etc.).</li><li>Experience with host and network forensics.</li><li>Strong understanding of security architectures and devices.</li><li>Strong understanding of threat intelligence consumption and management.</li><li>Strong understanding of root causes of malware infections and proactive mitigation.</li><li>Strong understanding of lateral movement, footholds, and data exfiltration techniques.</li><li>Experience with host and network practices of processing digital forensic data.</li><li>Knowledge of forensic processes for seizing and preserving digital evidence (e.g., the chain of custody).</li><li>Knowledge of server, network devices, security devices and diagnostic tools, and fault identification techniques</li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Job Description – Senior SAP BASIS &amp; Authorization Technical Analyst Core Responsibilities SAP BASIS: Provide end-to-end SAP Basis administration, technical operations, platform management, database administration, cloud integration, disaster recovery support, technical monitoring, lifecycle management, performance optimization and technical project support across all Production and NonProduction SAP landscapes.<br> The resource will ensure high availability, security, stability and optimal performance of SAP systems while supporting implementation projects, upgrades and operational activities.<br> SAP Authorization: Provide end-to-end SAP Security and Authorization administration across the enterprise SAP landscape, ensuring secure access management, compliance, governance, audit readiness and adherence to SAP security best practices.<br> Supports approximately 700 users.<br> Key Responsibilities 1 - SAP Basis Administration Administration of SAP S/4HANA, HANA, Solution Manager, Fiori, BTP, Cloud Connector, Web Dispatcher, DMS, BusinessObjects, SAP Router and related platforms.<br> System installations, upgrades, migrations, patches, kernel updates, support package implementation, transport management, client administration, system refresh and technical troubleshooting.<br> Coordination of SAP technical support activities with functional teams and external vendors.<br> 2 - Monitoring &amp; Operations Continuous 24x7 SAP application monitoring with tool-based alerting and consultant review for proactive corrective actions covering SAP applications, databases, operating systems, interfaces, background jobs, performance metrics, backups, clusters, and security logs.<br> Proactive alerting, incident management, root cause analysis, and operational reporting (daily, weekly, monthly, and quarterly).<br>s 3 - Database Administration Administration of SAP HANA, Sybase ASE, and MaxDB databases.<br> Backup and recovery, performance tuning, upgrades, capacity planning, replication, storage management, and database optimization.<br> 4 - High Availability &amp; Disaster Recovery Administration of HANA System Replication and ASCS clusters.<br> Disaster recovery planning, testing, annual DR drills, synchronization validation, and reporting.<br> 5 - Security &amp; Authorization Management User lifecycle management, role design and maintenance, authorization analysis, Fiori security, HANA security, and GRC/Firefighter administration.<br> Audit support, compliance reviews, access reviews, license management, and security optimization initiatives.<br> Support approximately 700 users.<br> Required Technical Skills SAP Basis Administration SAP HANA Administration SAP BTP &amp; Cloud Connector SAP Solution Manager SAP BusinessObjects SAP DMS SAP Web Dispatcher SAP Router HANA, ASE, MaxDB Databases Linux and Windows Administration High Availability &amp; Disaster Recovery Performance Tuning EarlyWatch Alert Reporting and Follow-up Action Implementation Backup &amp; Recovery using Veeam S/4HANA Security HANA Security Fiori Security BTP &amp; Cloud Connector Security BusinessObjects Security Solution Manager Security Audit &amp; Compliance Security Best Practices Educational Qualifications Bachelor's degree in Information Technology or equivalent.<br> SAP Basis, Security, Fiori or other relevant Certification preferred.<br> 6-8 years of SAP Basis administration experience.<br> 5-7 years of SAP Security and Authorization experience.<br> Experience in multiple full-cycle SAP implementations, upgrades, migrations, and support engagements.<br> Technical Competencies SAP Technology (Basis) Administration with HANA, Sybase &amp; MaxDB databases for SAP applications – Expert Database Management - Expert MS Azure - Advanced Server, Storage computer technology in different Operating Systems - Advanced SAP Roles and Authorizations - Expert Detailed Responsibilities 1 - SAP Landscape Administration - Responsible for complete administration of all SAP Production and Non-Production systems including: SAP S/4HANA SAP HANA Database SAP ASCS/HANA High Availability Clusters SAP DMS SAP MaxDB SAP Web Dispatcher SAP BTP SAP Cloud Connector SAP Fiori SAP Solution Manager SAP ASE SAP BusinessObjects SAP Data Provisioning Agent SAP Router 2 - SAP Technical Monitoring (24x7) - Perform proactive monitoring and administration of SAP landscapes including: SAP system health monitoring System log monitoring Audit log monitoring RFC monitoring Background job monitoring Update failures Work process monitoring Lock monitoring ABAP dump analysis SQL trace analysis Runtime analysis Response time monitoring CPU and Memory utilization Operating System monitoring Database monitoring Print management monitoring Certificate expiry monitoring Interface monitoring SAP HANA monitoring Cluster monitoring Backup monitoring Fiori availability monitoring Business transaction monitoring Develop automated monitoring and alerting mechanisms with proactive notification to technical support teams.<br> Prepare Daily, Weekly and Monthly operational reports.<br> 3 - SAP Basis Administration - Perform complete SAP Basis operational support including: System installation support Client administration Transport Management System administration Transport migration Change management Kernel upgrades Support Package implementation Feature Pack upgrades SAP Security Note implementation Certificate lifecycle management SAP Support Portal administration OSS incident management SAP Router configuration Job scheduling System startup/shutdown User support to Development and Functional teams 4 - Database Administration - Provide complete administration for: SAP HANA SYBASE ASE MaxDB Responsibilities include: Performance tuning Capacity planning Backup and recovery using Veeam Database upgrades Patch implementation Database reorganization Consistency checks Database monitoring Storage management High Availability administration System replication Database encryption SQL optimization Table partitioning Database troubleshooting 5 - High Availability &amp; Disaster Recovery - Responsible for: HANA System Replication ASCS Cluster administration DR synchronization Annual Disaster Recovery drills DR planning, execution and reporting High Availability monitoring 6 - System Refresh &amp; Technical Project Support - Plan and execute: Homogeneous system copies Annual system refreshes o Sandbox refresh o Quality system refresh 7 - SAP Platform Administration - Provide administration for: SAP Business Technology Platform (BTP) SAP Cloud Connector SAP Solution Manager SAP BusinessObjects SAP Data Provisioning Agent SAP DMS SAP Router SAP Web Dispatcher Activities include: Installation Configuration Patch management Version upgrades Destination management Certificate management Transport management Performance optimization Troubleshooting 8 - Backup Administration using Veeam - Manage: Backup scheduling and verification Restore testing Backup policy compliance Data recovery Backup troubleshooting Backup retention 9 - Performance Optimization - Perform: SAP EarlyWatch implementation Continuous Quality Checks Performance analysis Capacity planning System tuning Quarterly performance reporting 10 - Cloud Infrastructure Optimization - Support SAP infrastructure optimization through: Cloud cost optimization Resource rightsizing Capacity forecasting Governance compliance VM image upgrades OS lifecycle management Vendor support compliance Prevention of extended support costs 11 - Service Management - Support ITIL processes including: Incident Management Change Management Service Request Fulfilment Root Cause Analysis SLA compliance Documentation Technical reporting 12 - Cross Functional Technical Coordination - Coordinate with: SAP Functional teams SAP Development teams Infrastructure teams Database teams Storage teams Backup teams Network teams Operating System administrators SAP Support Third-party vendors Business stakeholders Deliverables o Daily monitoring reports o Weekly operational reports o Monthly technical reports o Quarterly performance reports o EarlyWatch reports o Capacity reports o Backup validation reports o DR drill reports o System refresh reports o Upgrade reports o Root Cause Analysis reports o Technical documentation o Technical SOP updates SAP Security Notes SAP Transport Management Backup &amp; Recovery using Veeam SAP Performance Tuning SAP EarlyWatch Database Administration (HANA, ASE, MaxDB) Cloud Infrastructure (Azure/AWS/GCP as applicable) Certificate Management ITIL Service Management SAP Authorization - Responsible for complete SAP Authorization Administration of all SAP Production and Non-Production systems including: User Administration o User creation o User modification o User lock/unlock o User deletion o Password resets License assignment User lifecycle management Role Administration o Role design o Role creation o Role modification o Role optimization o Composite roles o Derived roles o Role testing o Role transport Authorization Management o SU53 troubleshooting o SU24 maintenance o Authorization object maintenance o Transaction authorization o Table authorization analysis o Missing authorization analysis o Authorization testing SAP Fiori Security o Fiori role administration o Catalog assignment o Group assignment o Launchpad security o App authorization o BTP security integration SAP HANA Security o User administration o Role administration o Schema authorization o Technical user management o Database security Firefighter Support o Firefighter user administration o Emergency access monitoring o Firefighter authorization support o Audit &amp; Compliance Perform: Annual Access Reviews SAP Security Optimization Report Reviews and Implementation Audit log generation License measurement, utilization &amp; optimization reports Compliance reporting Security recommendations Implementation of approved security improvements Share Role Design, Compliance and Firefighter reports/documentation Provide daily operational support including: Authorization troubleshooting Security incident support Change management Project security support New implementation security Role redesign End-user support</span> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Company Description<br><p>CNS&nbsp;is a technology company that powers the future by providing digital solutions essential to support all enterprise and human development. While growing and managing a robust pool of supplier-partners for the benefit of our clients has always been a priority, we are constantly re-inventing ourselves.<br> Founded in 1987 with more than 30 years of experience, CNS employs over 320 employees including more than 250 certified engineers. We offer in-depth expertise and a range of best-in-class products that support the digital transformation of all major industries. With offices in three countries, we have an extensive reach into, and regional knowledge of the Middle East markets.<br> A shift into levering our many years of experience to develop pioneering software in-house will add yet another dimension to our highly innovative solutions-portfolio.</p><br><br>Job Description<br><p>The Cybersecurity Advisory &amp; Assurance Lead is a senior, hands-on cybersecurity professional responsible for leading complex cybersecurity assessments, advisory engagements and transformation programmes for enterprise and government customers.The role independently leads comprehensive, framework-based assessments (NIST CSF, NIST SP 800-series, ISO/IEC 27001, CIS Controls and applicable UAE/GCC regulatory requirements), taking engagements from initial customer workshops and evidence collection through technical assessment, control testing, maturity evaluation, gap analysis, risk identification, target-state design, remediation planning and executive presentation.Drawing on broad expertise across defensive security, offensive security, governance, risk and compliance (GRC), security architecture and security operations, the jobholder acts as a technically credible adviser to CISOs, SOC, infrastructure, cloud and architecture teams, and senior management.</p><br><p><u><strong>DUTIES &amp; RESPONSIBILITIES:</strong></u></p><br><ul><li>Lead enterprise-wide cybersecurity maturity and capability assessments, including NIST CSF-based current-state and target-state assessments covering governance and the Identify, Protect, Detect, Respond and Recover functions.</li><li>Conduct control design and operating-effectiveness assessments, evaluating whether technical controls are effectively implemented rather than relying solely on policy documentation.</li><li>Review cybersecurity policies, standards, procedures and operating models, and evaluate them against NIST CSF, NIST SP 800-series, ISO/IEC 27001/27002, CIS Critical Security Controls, UAE Information Assurance requirements, UAE/GCC cybersecurity regulations, PCI DSS, SWIFT CSP, cloud security frameworks and sector-specific requirements.</li><li>Assess and advise on defensive security and SOC capabilities, including SOC operating models, SIEM and security monitoring, EDR/XDR, detection engineering, threat intelligence, threat hunting, security logging, incident response, vulnerability management, IAM/PAM, network, endpoint, email and web security, ransomware resilience, cyber crisis management, and business continuity and cyber recovery.</li><li>Assess security architecture across enterprise infrastructure, cloud and hybrid environments, network, identity, endpoint, data, application security, security monitoring and, where applicable, OT/ICS environments.</li><li>Assess the effectiveness and maturity of cybersecurity processes, including asset, risk, vulnerability, patch and change management, identity lifecycle and privileged access management, security monitoring, incident response, third-party risk, secure development, threat management, security architecture governance, data protection, business continuity and cyber recovery.</li><li>Scope, challenge and interpret penetration-testing and red-team assessments; review vulnerability and penetration-testing results and assess vulnerability management and remediation processes.</li><li>Validate whether technical findings represent material business risks and work with offensive-security specialists to translate them into risk and remediation programmes, supporting purple-team and control-validation activities where required.</li><li>Conduct cybersecurity governance and cyber-risk assessments, assess governance structures and accountability, evaluate cyber-risk management methodologies, support regulatory and compliance readiness, and map controls across multiple regulatory frameworks.</li><li>Identify security gaps, risks, control weaknesses and capability deficiencies, and develop prioritised remediation roadmaps and cybersecurity improvement programmes.</li><li>Develop maturity models, heatmaps, risk registers and management dashboards, and produce executive, management and detailed technical assessment reports.</li><li>Present findings and recommendations to CISOs, CIOs, executives and governance committees, translating highly technical issues into business-risk language and practical remediation recommendations.</li><li>Lead customer workshops and stakeholder interviews; define assessment methodologies and evidence requirements, and maintain evidence traceability between findings and conclusions.</li><li>Manage assessment workstreams and guide junior consultants, challenging customer assumptions professionally and constructively.</li><li>Support proposals, RFP responses, statements of work and customer presentations, and assist Account Managers in identifying follow-on cybersecurity opportunities.</li></ul><br>Qualifications<br><p><u><strong>Education</strong></u></p><br><p><strong>Required:</strong>&nbsp;</p><br><ul><li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems or Engineering (Electronics, Computer or Telecom).</li></ul><p><strong>Desirable:</strong>&nbsp;</p><br><ul><li>Master's degree such as an MSc in Cybersecurity or Information Security, or an MBA with a technology focus. For a lead role this is a plus, not usually a must.</li><li>Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Lead Implementer, CISA, CCSP, GIAC or NIST-related training/certification</li><li>Technical/offensive certifications such as OSCP, PNPT or CEH (or equivalent practical experience)</li></ul><p><u><strong>Experience</strong></u></p><br><p><strong>Required:</strong>&nbsp;</p><br><ul><li>8 years of cybersecurity experience spanning multiple disciplines</li><li>Demonstrable experience leading enterprise cybersecurity assessments</li><li>Experience conducting stakeholder interviews and evidence-based assessments</li><li>Experience producing executive-level reports and presenting to senior customer stakeholders</li></ul><p><strong>Desirable:</strong>&nbsp;</p><br><ul><li>12+ years of cybersecurity experience</li><li>Experience in government, critical infrastructure, financial services, aviation, energy or other highly regulated sectors</li></ul><br>Additional Information<br><p><u><strong>Skills &amp; Abilities</strong></u></p><br><p><strong>Required:</strong>&nbsp;</p><br><ul><li>Strong practical knowledge of NIST CSF, ISO 27001 and cybersecurity control frameworks</li><li>Strong understanding of SOC/security operations, security architecture and enterprise controls</li><li>Working knowledge of offensive-security methodology</li><li>Understanding of major cybersecurity technology categories</li><li>Excellent report writing, workshop facilitation and executive communication</li><li>Ability to work independently and move between technical, operational and governance discussions</li></ul><p><strong>Desirable:</strong>&nbsp;</p><br><ul><li>Knowledge of UAE Information Assurance and GCC cybersecurity regulations</li><li>Experience with PCI DSS, SWIFT CSP and cloud security frameworks</li><li>Exposure to OT/ICS security assessments</li></ul><p><em>Compliance with policies and procedures based on the ISO standards adopted by CNS.</em></p><br><br><br> </div>

# Remote Junior Cybersecurity Supply Chain Risk Analyst | AED 13,000–17,000/Month<br><br>**Location:** United Arab Emirates (Remote)<br>**Employment Type:** Full-Time<br>**Experience Level:** Junior / Entry-Level<br>**Department:** Cybersecurity / Third-Party Risk Management<br>**Salary Range:** AED 13,000–17,000 per month *(proposed; subject to employer budget and qualifications)*<br><br>## About the Role<br><br>We are seeking a detail-oriented and analytical **Junior Cybersecurity Supply Chain Risk Analyst** to help assess and monitor security risks associated with external vendors, technology providers, software suppliers, and third-party service partners.<br><br>As organizations increasingly depend on external technology services, understanding supplier security practices is essential. In this role, you will support vendor security assessments, maintain risk records, review security documentation, and help track remediation activities.<br><br>This position is suitable for an early-career IT professional interested in cybersecurity, vendor risk management, and information security governance. Training and mentorship will be provided.<br><br>## Key Responsibilities<br><br>* Assist with cybersecurity assessments of third-party vendors and technology suppliers.<br>* Review vendor security questionnaires and supporting documentation.<br>* Help identify potential risks relating to data access, system integrations, and outsourced services.<br>* Maintain supplier risk registers and assessment records.<br>* Support the collection of security certifications, audit reports, and compliance evidence from vendors.<br>* Track outstanding security findings and follow up on remediation plans.<br>* Assist with reviewing vendor access permissions and data-handling practices.<br>* Research supplier security incidents and relevant threat advisories.<br>* Help prepare risk summaries and reports for internal stakeholders.<br>* Collaborate with procurement, legal, IT, and cybersecurity teams.<br>* Support periodic reassessments of critical suppliers.<br>* Escalate significant third-party security concerns to senior team members.<br><br>## Requirements<br><br>* Diploma or bachelor's degree in IT, Cybersecurity, Information Systems, Business Technology, or a related field; equivalent practical knowledge may be considered.<br>* Basic understanding of cybersecurity fundamentals and information security controls.<br>* Strong analytical skills and attention to detail.<br>* Good written communication and report-writing abilities.<br>* Ability to organize documentation and maintain accurate records.<br>* Familiarity with spreadsheets and assessment questionnaires.<br>* Ability to communicate professionally with internal teams and external suppliers.<br>* Willingness to learn third-party risk management processes and security frameworks.<br><br>**Entry-level applicants are encouraged to apply.** Relevant coursework, internships, IT support experience, and introductory cybersecurity certifications are advantageous.<br><br>## Preferred Skills<br><br>* Awareness of third-party risk management and vendor due diligence.<br>* Basic knowledge of ISO 27001, NIST Cybersecurity Framework, or CIS Controls.<br>* Familiarity with SOC 2 reports or information security certifications.<br>* Understanding of data protection, access management, and incident reporting.<br>* Basic knowledge of cloud services and software supply chain risks.<br>* Familiarity with risk registers, spreadsheets, and reporting tools.<br>* Relevant introductory training in cybersecurity, governance, risk, or compliance.<br><br>## What We Offer<br><br>* Proposed salary range of AED 13,000–17,000 per month, depending on qualifications and experience.<br>* Remote working arrangement, subject to employer policy and country-of-residence eligibility.<br>* Structured onboarding and mentorship from experienced professionals.<br>* Opportunities to develop third-party security assessment and risk analysis skills.<br>* Exposure to vendor governance, security reviews, and remediation tracking.<br>* Professional development and ongoing training.<br>* A collaborative environment focused on reducing security risks across the supply chain.<br><br>## How to Apply<br><br>Submit your CV highlighting your IT background, cybersecurity training, analytical skills, relevant projects, internships, or risk management experience.<br><br>Please use **“Junior Cybersecurity Supply Chain Risk Analyst – Remote”** as the application subject line.<br><br>Only shortlisted candidates will be contacted.<br><br>#CyberSecurity #SupplyChainSecurity #ThirdPartyRisk #VendorRiskManagement #CyberRisk #InformationSecurity #GRC #JuniorITJobs #EntryLevelJobs #RemoteJobs #UAEJobs #DubaiJobs<br>