Senior Associate Information Security- Emirati

About this opportunity

We are seeking Associate – Information Security who manages and monitors the organization’s information security framework, ensuring compliance with internal policies, regulatory standards, and industry best practices. The role supports enterprise security, data governance, risk management, and business continuity initiatives; conducts security assessments and risk reviews; monitors cybersecurity controls and KPIs; and identifies and mitigates security risks across systems & vendors Contribute to the development, implementation, and continuous enhancement of the organization's information security governance framework, standards, and operating procedures. Assess the effectiveness of security controls and recommend improvements to strengthen the overall cybersecurity posture across technology environments and third-party engagements. Perform regular security reviews, control assessments, and compliance evaluations to identify risks, vulnerabilities, and opportunities for improvement. Support the governance and oversight of information security initiatives, ensuring alignment with organizational objectives and regulatory expectations. Review security configurations, user privileges, network controls, and infrastructure settings to verify compliance with security best practices and identify potential weaknesses. Establish and monitor security performance indicators and risk metrics, providing meaningful reporting to support informed decision-making. Participate in technology initiatives and transformation programs by performing security reviews, identifying potential risks, and recommending practical mitigation strategies throughout the project lifecycle. Develop, maintain, and periodically test cybersecurity incident response capabilities to ensure effective preparation, response, and recovery from security events. Support compliance activities related to information security, data protection, and regulatory obligations, including internal and external audit engagements. Monitor the effectiveness of cybersecurity platforms and privileged access controls while supporting the implementation of new security technologies and continuous improvement initiatives. Review business resilience, disaster recovery, and continuity arrangements to ensure appropriate planning, testing, and operational readiness. Work closely with risk management and assurance functions to identify emerging cyber risks, evaluate their impact, and support the implementation of effective mitigation measures. Evaluate security-related operational processes and internal controls, recommending enhancements to reduce exposure to cyber threats, data compromise, and operational risk. Maintain risk documentation and follow up on mitigation plans, ensuring identified actions are tracked, monitored, and completed within agreed timelines. Support enterprise risk, data governance, and fraud prevention initiatives by promoting consistent implementation of security and governance controls across the organization. Deliver cybersecurity awareness sessions and promote a security-first culture through ongoing education and engagement initiatives. Assist with maintaining compliance against recognized industry standards and regulatory frameworks, coordinating assessments, certifications, and remediation activities where required. Stay up to date with emerging cybersecurity threats, new technologies, and industry best practices, and recommend improvements to strengthen the organization's overall security posture.