Information Security Specialist

To ensure the organization’s compliance with Dubai Government Information Security Regulations and UAE federal cybersecurity and data protection laws by implementing, monitoring, and maintaining effective information security controls, risk management practices, and incident response mechanisms.

• Implement and maintain controls in alignment with DESC ISR and NESA IA Standards
• Ensure compliance with UAE PDPL (Federal Decree Law No. 45 of 2021)
• Maintain the Information Security Management System (ISMS)
• Support regulatory reporting to Dubai authorities when required
• Assist in periodic compliance assessments and government audits
• Conduct formal information security risk assessments
• Maintain risk registers and treatment plans
• Implement security baselines for servers, endpoints, and network devices
• Enforce access control and data classification policies
• Ensure encryption standards are applied for data at rest and in transit

• Monitor security events through SIEM and SOC tools
• Investigate and respond to cybersecurity incidents
• Coordinate containment and remediation actions
• Escalate reportable incidents to management and authorities where mandated

• Support implementation of data protection impact assessments (DPIA)
• Ensure personal data processing complies with PDPL requirements
• Maintain data retention and destruction procedures
• Coordinate with Legal and HR on breach notification obligations

• Conduct third-party security assessments
• Review vendor compliance with Dubai ISR requirements
• Ensure cloud deployments align with UAE data residency and classification standards

• Conduct mandatory cybersecurity awareness training
• Promote secure handling of government-classified information
• Support phishing simulation and testing programs

• Bachelor’s degree in Information Security, Computer Science, or related field
• 3–5 years of experience in cybersecurity within regulated or government-aligned environments
• Strong knowledge of:
  • CISSP (or Associate of CISSP)

• Regulatory interpretation and control mapping
• Risk assessment methodology (qualitative & quantitative)