Information Security Specialist

We are looking to hire an Information Security Specialist who will be responsible for managing and supporting information security governance, risk assessments, security controls, and compliance initiatives for our government client based in Dubai.The role will be on 12-month renewable contract.The role sits within the Information Technology Department.We are looking for a passionate Information Security Specialist who is committed to protecting IT infrastructure, applications, systems, and information assets against security threats and vulnerabilities. You should also have experience in information security governance, risk assessment, security architecture, and compliance with information security frameworks, including Dubai Government's Information Security Regulation (ISR) and Information Security Management Systems (ISMS).Key responsibilities:Manage and support the organisation's information security environment, ensuring IT infrastructure, networks, applications, and systems are protected against threats and vulnerabilities in line with recognised security standards.Support the implementation and ongoing compliance of Dubai Government's Information Security Regulation (ISR) and Information Security Management System (ISMS) frameworks.Investigate information security incidents, system misuse, unauthorised access attempts, and violations of information security policies.Conduct information security threat and risk assessments across IT infrastructure, applications, systems, and communications, recommending appropriate mitigation measures.Monitor and evaluate information security hardware and software performance, assessing the impact of vendor changes, system upgrades, and emerging technologies on the existing security environment.Contribute to the continuous improvement of information security policies, controls, processes, and technologies.Research, assess, and support the implementation of new information security technologies to strengthen the organisation's security posture.Coordinate with external suppliers and service providers on technical support, security solutions, contracts, and related requirements.Collaborate with internal IT and business teams to maintain the availability, reliability, and scalability of IT services in line with business requirements and service-level agreements (SLAs).Ensure adherence to organisational quality standards, information security policies, and applicable ISR and ISMS requirements.Knowledge, skills & experience:Proven experience in information security, cybersecurity, IT risk management, or information security governance.Practical experience with information security frameworks, preferably Dubai Government's ISR and ISMS requirements.Strong knowledge of information security risk assessments, threat identification, vulnerability management, and security control implementation.Experience assessing the security of IT infrastructure, networks, applications, systems, and communications.Understanding of information security policies, compliance requirements, audit processes, and remediation activities.Knowledge of security architecture, security monitoring, incident investigation, and information security technologies.Experience coordinating with internal IT teams, external vendors, and service providers to address security requirements and technical issues.Strong analytical, problem-solving, communication, and stakeholder management skills.Relevant certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor would be an advantage.Availability:Preference will be given to candidates available immediately.We are looking for a candidate who will be able to work in the United Arab Emirates. Please apply with your resume and remember to provide us with your contact details.We will review your job application within 7 working days. Should your profile fit the requirements of the role, a consultant from Edari will be in touch with you to gain a deeper understanding of your profile, discuss the role in more detail, and outline potential next steps.