information security consultant

United Al Saqer Group

<div><p>Established more than 40 years ago, the United Al Saqer Group (UASG) is one of the leading multi-sector business groups in the United Arab Emirates. The UASG owns and operates a diverse yet complementary portfolio of six UAE-based companies encompassing several key industry sectors, which includes Abu Dhabi Motors, Dalma Motors, Al Saqer Heavy Equipment, Al Saqer Property Management, Royal International Construction, and Royal Joinery.</p><p></p><p>
We are recruiting a Information Security Consultant to join our exceptional ICT Department. The person is responsible for providing expert guidance on information security strategies, assessing risks, developing policies, and implementing solutions to safeguard the organization&rsquo;s data, systems, and infrastructure. The Information Security Consultant ensures compliance with cybersecurity standards and supports the organization&rsquo;s efforts in mitigating security threats and vulnerabilities.</p><p></p><p><b>
AREA OF RESPONSIBILITY:</b></p><p><b>
Security Operations &amp; Threat Management:</b></p><ul><li><p>
Manage and operate security tools including SIEM, EDR, PAM, DLP, and IDS/IPS to detect, analyse, and respond to threats.</p></li><li><p>
Lead the response to security incidents and breaches, performing root cause analysis and implementing corrective and preventive actions.</p></li><li><p>
Proactively hunt for threats across the IT landscape, ensuring the security of core network assets, email gateways, and cloud services.</p></li><li><p>
Conduct regular vulnerability scans and coordinate penetration testing, validate findings, and drive remediation efforts with relevant teams.</p></li><li><p>
Monitor and optimize security logs and alerts to ensure effective detection and timely escalation of suspicious activities.</p></li></ul><p></p><p><b>
Security Architecture &amp; Engineering:</b></p><ul><li><p>
Provide expert advice on secure system designs, network defenses, access controls, and encryption standards.</p></li><li><p>
Secure cloud configurations in multi-cloud environments, with hands-on expertise in Azure and Microsoft 365, including the implementation of logging, encryption, and secure DevOps practices.</p></li><li><p>
Implement and manage Identity &amp; Access Management (IAM) and Privilege Access Management (PAM) solutions, enforcing least privilege access through regular privilege audits and access reviews.</p></li><li><p>
Conduct security architecture reviews for new projects, applications, and integrations, ensuring alignment with best practices and compliance standards.</p></li><li><p>
Support Zero Trust adoption and embed security into the software development lifecycle (SDLC) by enforcing secure access principles, promoting secure coding practices, and integrating DevSecOps</p></li><li><p>
Evaluate, recommend, and deploy security tools and technologies to strengthen the organization&rsquo;s defensive posture.</p></li></ul><p></p><p><b>
Governance, Risk &amp; Compliance:</b></p><ul><li><p>
Develop, maintain, and implement corporate information security policies, standards, and procedures aligned with organizational processes and industry best practices.</p></li><li><p>
Assist in the maintenance and continual improvement of the Information Security Management System (ISMS), ensuring compliance and documentation aligned with key standards and regulations such as ISO 27001, ISO 20000-1, and UAE IA, PDPL., GDPR</p></li><li><p>
Conduct risk assessments on internal systems, business processes, and third-party vendors to evaluate security controls and ensure compliance with corporate policies and regulatory requirements.</p></li><li><p>
Support internal and external audits by preparing documentation, evidence of controls, and responses to audit findings.</p></li><li><p>
Promote a strong security culture by supporting awareness and training programs, ensuring staff understand their compliance responsibilities.</p></li><li><p>
Define and track security KPIs and metrics to measure program effectiveness and report on risk posture to management.</p></li></ul><p></p><p><b>
Reporting &amp; Continuous Improvement:</b></p><ul><li><p>
Prepare clear and detailed reports on security incidents, risk assessment findings, audit outcomes, and remediation progress for management and stakeholders.</p></li><li><p>
Track and analyse security metrics, trends, and KPIs to measure control effectiveness and highlight areas for improvement</p></li><li><p>
Capture lessons learned from incidents, tests, and assessments, and integrate them into security processes, playbooks, and awareness programs</p></li><li><p>
Research emerging threats, new attack techniques, and innovative security tools to continuously strengthen detection and response capabilities.</p></li><li><p>
Participate in Business Continuity (BCP) and Disaster Recovery (DR) testing, as well as cyber crisis tabletop exercises, to validate preparedness and strengthen organizational resilience.</p></li></ul><p></p><p><b><br>
QUALIFICATIONS &amp; CERTIFICATIONS &amp; EXPERIENCE (MANDATORY &amp; PREFERRED):</b></p><ul><li><p>
Bachelor&rsquo;s degree in computer science, Information Security, or a related field</p></li><li><p>
A minimum of 4&ndash;6 years of hands-on experience in a cybersecurity or IT security role.</p></li><li><p>
Certifications (Mandatory): CISSP or CISM.</p></li><li><p>
Certifications (Preferred): ISO 27001 Lead Implementer or Lead Auditor, Cloud/Azure security certifications, and technical certifications such as CEH or OSCP.</p></li><li><p>
Knowledge: Strong understanding of security frameworks (e.g., ISO 27001, NIST CSF), risk management principles, and regulatory compliance (e.g., GDPR, UAE PDPL). Familiarity with IT Service Management (ITIL best practices) is preferred.</p></li></ul><p></p><p><b>
SKILLS &amp; COMPETENCIES (Technical, Behavioral, and Soft):</b></p><p><b>
Technical Competencies:</b></p><ul><li><p>
Security Operations - Strong hands-on expertise in incident response, log analysis, IOC analysis and managing platforms like SIEM, EDR, PAM and DLP</p></li><li><p>
Vulnerability Management - Proficiency with penetration testing and vulnerability assessment tools.</p></li><li><p>
Network &amp; Cloud Security &ndash; Strong knowledge of firewalls, IDS/IPS, WAF, VPNs, and security configurations in hybrid environments.</p></li><li><p>
Identity &amp; Access Management (IAM) and Privileged Access Management (PAM) &ndash; Experience with IAM/PAM solutions and implementing access controls, as well as data protection measures such as encryption and data classification.</p></li></ul><p><b>
Other Competencies:</b></p><ul><li><p>
Frameworks &amp; Standards: Familiarity with ISO 27001, ISO 20000-1, NIST CSF, MITRE ATT&amp;CK, and CIS Controls.</p></li><li><p>
Compliance: Experience with compliance efforts for regulations such as UAE Information Assurance (IA) Standards, PDPL and GDPR.</p></li><li><p>
Integrity and Compliance - Aligns all actions and decisions with organizational policies and procedures, demonstrating a strong commitment to professional standards and ethics.</p></li><li><p>
Analytical &amp; Problem-Solving Skills - Exhibits strong analytical, troubleshooting, and problem-solving skills, with a proven ability to work effectively under pressure.</p></li><li><p>
Business Acumen - Understands the challenges and objectives of internal business units and takes the initiative to provide effective and pragmatic security solutions.</p></li><li><p>
Communication Skills - Possesses excellent written and verbal communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.</p></li></ul><p></p><p><b>
Behavioural Competencies:</b></p><ul><li><p>
Customer Focus - Understands customer challenges and takes initiative to resolve them effectively.</p></li><li><p>
Accountability and Ownership - Manages projects with minimal supervision and ensures quality results.</p></li><li><p>
Agility and Adaptability - Manages change smoothly and supports others during transitions.</p></li><li><p>
Collaboration &amp; Influence - Builds networks across functions and resolves conflicts constructively.</p></li><li><p>
Result Orientation - Sets clear goals and works proactively to achieve high performance.</p></li></ul><p></p><p><b>
Location: Abu Dhabi</b></p></div>

Information Security Consultant

Acuiti Labs

<div></div><div><div><b>Job Title:</b> <b>Consultant &ndash; Information Security Officer</b></div><div><b>
Role Overview</b></div><div>
The <b>Information Security Officer (ISO)</b> will be responsible for establishing, implementing, monitoring, and improving Acuiti Labs&rsquo; <b>Information Security Management System (ISMS)</b> and <b>Data Protection framework</b> in alignment with <b>ISO/IEC 27001:2013</b>, <b>ISO/IEC 27001:2022</b>, and <b>ISO/IEC 27701:2019</b> standards.</div><div>
This role combines strategic planning, risk management, compliance oversight, and hands-on execution to ensure robust protection of Acuiti Labs&rsquo; information assets and adherence to regulatory and client requirements.</div><div></div><h3 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h3><h4 class="jobSectionHeader"><b>
1. Planning</b></h4><ul><li>
Define information security goals and objectives aligned with Acuiti Labs&rsquo; business strategy.</li><li>
Establish the scope and boundaries of the organization&rsquo;s ISMS.</li><li>
Develop and maintain information security policies, standards, and guidelines.</li><li>
Create classification policies for information assets and ensure appropriate handling procedures.</li><li>
Plan and implement ISMS in compliance with <b>ISO/IEC 27001</b> standards.</li><li>
Develop risk management and security implementation frameworks with measurable KPIs.</li><li>
Define and maintain a process for continuous review and improvement of security policies and procedures.</li></ul><div></div><h4 class="jobSectionHeader"><b><br>
2. Information Security Management</b></h4><ul><li>
Maintain and improve the organization-wide <b>Information Security and Risk Management Plan</b>.</li><li>
Ensure integration of security principles into all business and IT processes.</li><li>
Conduct regular <b>risk assessments</b>, vulnerability analyses, and impact assessments.</li><li>
Define and implement <b>risk treatment</b> and <b>residual risk evaluation</b> measures.</li><li>
Oversee incident response, including documentation, analysis, and remediation of security breaches.</li><li>
Monitor compliance with legal, regulatory, and contractual requirements.</li><li>
Lead organization-wide <b>security awareness and training programs</b> and measure their effectiveness.</li><li>
Drive <b>Business Continuity and Disaster Recovery Planning (BCP/DR)</b> initiatives, including periodic drills and updates.</li><li>
Manage change control processes for ISMS and IT infrastructure updates.</li><li>
Ensure vendor and contractor compliance with organizational security standards.</li></ul><div></div><h4 class="jobSectionHeader"><b><br>
3. Data Protection Officer Responsibilities</b></h4><ul><li>
Serve as the primary point of contact for <b>data privacy and protection matters</b>.</li><li>
Ensure compliance with <b>ISO/IEC 27701:2019</b>, <b>GDPR</b>, and other relevant data protection laws.</li><li>
Maintain detailed records of all data processing activities.</li><li>
Conduct periodic <b>data protection impact assessments (DPIAs)</b>.</li><li>
Respond to <b>data subject requests</b> and coordinate with supervisory authorities as needed.</li><li>
Monitor changes in privacy laws and update internal practices accordingly.</li></ul><div></div><h4 class="jobSectionHeader"><b><br>
4. Information Security Auditing</b></h4><ul><li>
Conduct internal <b>ISMS audits</b> at least annually or after significant infrastructure changes.</li><li>
Evaluate compliance with <b>legal, regulatory, and organizational information security requirements</b>.</li><li>
Prepare and present audit reports with actionable recommendations to senior management.</li><li>
Lead remediation efforts and ensure timely closure of audit findings.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Qualifications</b></h3><ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Information Technology, Computer Science, or related field.</li><li>
MBA or equivalent management qualification preferred.</li><li>
Relevant certifications such as <b>CISSP, CISM, CISA, or CRISC</b> are highly desirable.</li><li>
5&ndash;10 years of progressive experience in Information Security, Risk Management, or IT Governance, ideally within the <b>IT or SAP consulting industry</b>.</li><li>
Proven experience implementing or maintaining <b>ISO/IEC 27001</b> and <b>ISO/IEC 27701</b> standards.</li><li>
Strong understanding of <b>IT audit principles</b>, <b>cybersecurity frameworks</b>, and <b>risk assessment methodologies</b>.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Desired Skills and Competencies</b></h3><ul><li>
In-depth understanding of <b>infrastructure security</b>, <b>cloud platforms (AWS, Azure)</b>, <b>network security</b>, and <b>identity management</b>.</li><li>
Experience with <b>Microsoft technologies</b> (Windows Server, Active Directory, M365) and <b>ServiceNow</b>.</li><li>
Strong knowledge of <b>SAP ecosystem</b> security considerations preferred.</li><li>
Exceptional communication, leadership, and stakeholder management skills.</li><li>
Ability to work independently, manage multiple priorities, and drive cross-functional collaboration.</li><li>
Strong ethical standards, analytical mindset, and commitment to continuous improvement.</li><li>
Awareness of global data privacy regulations and cybersecurity trends.</li></ul></div><div></div>

Information Security Officer Consultant

ISO Management Consultancy

<p><b>ISO Consultant Required</b></p><p>Experience: 8-10 years</p><p>Location: Dubai</p><p>Ability to deliver under pressure effectively priorities and multitask Experience in working in an international environment Fluency in written and spoken English and Engineering Degree</p><p>Lead auditor and implementor qualification in ISO 9001, ISO 27001, ISO 22301, should have sound knowledge of IT infrastructure, cyber security networking , ERP &amp; Project Management , SOC, PCI and iso 42001</p><p>Must have a excellent English communication skills.</p><ul><li>Degree in computer science or a technology-related field.</li><li>Professional information security certification. such as ISO/IEC 27001 and NIST.</li><li>Experience in an information security role.</li><li>Solid knowledge of various information security frameworks.</li><li>Excellent problem-solving and analytical skills.</li><li>Ability to educate a non-technical audience about various security measures.</li><li>Effective verbal and written communication skills</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: AED10,000.00 - AED15,000.00 per month</p><p>Ability to commute/relocate:</p><ul><li>Dubai: Reliably commute or planning to relocate before starting work (Preferred)</li></ul><p>Application Question(s):</p><ul><li>EXPERIENCE IN ISO 27001 CONSULTANCY AND LEAD AUDITOR AND IMPLEMENTOR FOR ISO 9001 ,ISO 27001</li></ul>

Sr consultant for ISO 27001 & BCMS Required

help AG

<div><p>Help AG is looking for an experienced Security Consultant (U.A.E National) who will be responsible for the proper and accurate handling of support requests for Help AG&rsquo;s customers. The security consultant will receive requests by email/calls and handle those according to Help AG&rsquo;s support workflow including.</p><ul><li><p><br>
Continuous communication with the customer on tickets, health check, projects, and other technical work.</p></li><li><p>
Based on the business requirement, security consultant will be required to work as resident engineer at customer site.</p></li><li><p>
Proper and accurate use of tools (ticket system, time tracking) and documentation of the tickets.</p></li><li><p>
Follow-up on any escalations meeting SLA.</p></li><li><p>
Attend technical training and achieve certification as part of career development.</p></li><li><p>
Additionally, security consultant is expected to work on projects, POC and documentation.</p></li><li><p>
The primary targets are customer-satisfaction, professionalism, accuracy, and an outstanding high quality in the work/duties.</p></li></ul><p><b><br>
Responsibilities</b></p><p></p><ul><li><p>
Work on technical support tickets from customers.</p></li><li><p>
Perform health check for the supported technologies.</p></li><li><p>
Work on projects and pre-sales activity as and when required.</p></li><li><p>
Keep ticket-system up to date to meet SLA requirement.</p></li><li><p>
Interaction and communication with vendor support organizations and engineers.</p></li></ul><p></p><p><b><br>
Qualifications and Skills</b></p><ul><li><p><br>
More than 5 years of working experience in technical Information Security.</p></li><li><p>
Experience of working in an enterprise environment handling technical support, projects.</p></li><li><p>
Bachelor&rsquo;s degree in information security or IT-related matter or equivalent experience.</p></li><li><p>
Deep understanding of technical relations in a complex environment.</p></li><li><p>
An advantage to have experience and the highest certifications of the vendors F5 Networks, Broadcom, Palo Alto firewall, Pulse Secure, OPSWAT, Infoblox, Ixia, and Fortinet technologies.</p></li><li><p>
Excellent and accent-free communication skills in English (Arabic would be an advantage).</p></li><li><p>
Proper and structured documentation and diagramming.</p></li><li><p>
Excellent organizational skills in enterprise support.</p></li><li><p>
Understanding of information security concepts and related technologies.</p></li><li><p>
Strong background and experience in TCP/IP networking of large-scale organizations.</p></li><li><p>
Flexible work approach, based on the job requirements.</p></li><li><p>
Being able to identify new work areas and to set new goals for themselves.</p></li><li><p>
Excellent communication and training skills.</p></li><li><p>
Outstanding customer handling, friendly and goal-oriented.</p></li><li><p>
Being able to understand complex business processes and activities.</p></li></ul><p></p><p><b><br>
Benefits</b></p><ul><li><p><br>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b><br>
About Us</b></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.</p><p>
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Security Consultant (UAE National)

Deloitte

<div></div><div><div><div><div><div>Job requisition ID :: 86204
</div></div></div></div><div><div><div><div>Date: Oct 24, 2025
</div></div></div></div><div><div><div><div>Location: Mumbai
</div></div></div></div><div><div><div><div>Designation: Consultant
</div></div></div></div><div><div><div><div>Entity: Deloitte Touche Tohmatsu India LLP<br>
</div></div></div></div><p></p><div><div><div><div><p>As a <b>Consultant </b>in our <b>Cyber Strategy &amp; Transformation</b> Team you&rsquo;ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations. Our services help our clients tackle the many security challenges they face daily and develop effective solutions using people, processes and technology, while enabling better security and risk decisions, and reducing costs related to managing security risks.</p><br>
<p></p>
<p><b>
Desired qualifications</b></p>
<ul><li>Knowledge of cyber / information security concepts, risk and controls concepts.</li></ul>
<ul><li>Strong understanding of security-related operational processes in IT environments.</li></ul>
<ul><li>Strong knowledge of both IT Systems (Windows server, database, etc.) and Application to a good extend.</li></ul>
<ul><li>Strong knowledge of IT infrastructure and Networking, including Firewalls, IDS/IPS, proxy, antivirus, etc.</li></ul>
<ul><li>Knowledge and experience in carrying out audit based on regulatory guidelines and master direction from regulatory such as RBI, NPCI, SEBI and IRDAI.</li></ul>
<ul><li>Knowledge of IT General Controls and Application security review.</li></ul>
<ul><li>Security Assessments: Proven experience conduction Information Security assessments.</li></ul>
<ul><li><b>1.5 - 3 </b>years of experience in the Cyber Security or IT Audit Domain</li></ul>
<ul><li>Certifications &ndash; ISO27001:2022, Cloud certification or equivalent (technology-based certification)</li></ul>
<p><b>
Location and way of working</b></p>
<ul><li>Base location: Mumbai</li></ul>
<ul><li>This profile involves frequent travelling to client locations.</li></ul>
<ul><li>Hybrid is our default way of working. Each domain has customized the hybrid approach to their unique needs.</li></ul></div></div></div></div></div><p></p>

T&T - Cyber : CST - ISMS - Consultant - Mumbai

cander

<div>
 <p>
  A leading cybersecurity company is seeking an experienced
  <strong>
   Security Consultant
  </strong>
  to join their team in Abu Dhabi.
 </p>
 <p>
  <br/>
 </p>
 <p>
  The role involves delivering high-quality technical support, performing health checks, and contributing to implementation projects and POCs &mdash; ensuring top-level customer satisfaction and service excellence.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   🔹 Responsibilities:
  </strong>
 </p>
 <ul>
  <li>
   Manage and resolve technical support tickets in line with SLAs.
  </li>
  <li>
   Conduct regular health checks for supported security technologies.
  </li>
  <li>
   Participate in implementation projects and pre-sales activities when required.
  </li>
  <li>
   Maintain proper documentation and keep ticket systems up to date.
  </li>
  <li>
   Communicate effectively with customers, vendors, and internal teams.
  </li>
  <li>
   Attend technical training and achieve relevant certifications.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   🔹 Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   5+ years of experience in
   <strong>
    Information Security
   </strong>
   or a related technical domain.
  </li>
  <li>
   Bachelor&rsquo;s degree in
   <strong>
    Information Security, IT, or equivalent
   </strong>
   .
  </li>
  <li>
   Strong background in
   <strong>
    TCP/IP networking
   </strong>
   for large-scale enterprises.
  </li>
  <li>
   Hands-on experience or certifications in
   <strong>
    F5, Broadcom, Palo Alto, Pulse Secure, OPSWAT, Infoblox, Ixia, or Fortinet
   </strong>
   .
  </li>
  <li>
   Excellent communication skills in
   <strong>
    English
   </strong>
   (Arabic is an advantage).
  </li>
  <li>
   Strong organizational, documentation, and customer-handling skills.
  </li>
  <li>
   Professional, proactive, and goal-oriented mindset.
  </li>
 </ul>
 <p>
  <strong>
  </strong>
 </p>
 <p>
  <strong>
   📍Location:
  </strong>
  Onsite, Abu Dhabi
 </p>
 <p>
  <strong>
   🕒 Employment Type:
  </strong>
  Full-time
 </p>
 <p>
  <br/>
 </p>
 <p>
  If you&rsquo;re passionate about cybersecurity and want to work with cutting-edge technologies in a dynamic environment &mdash; we&rsquo;d love to connect.
 </p>
</div>


Security Consultant

<p><b>ISO Consultant Required</b></p><p>Experience: 5-7 years</p><p>Location: Dubai</p><p>Ability to deliver under pressure effectively priorities and multitask Experience in working in an international environment Fluency in written and spoken English and Engineering Degree</p><p>Lead auditor and implementor qualification in ISO 9001, ISO 27001, ISO 22301,ISO 42001 should have sound knowledge of IT infrastructure, cyber security networking , ERP &amp; Project Management.</p><p>Must have a excellent English communication skills.</p><ul><li>Degree in computer science or a technology-related field.</li><li>Professional information security certification. such as ISO/IEC 27001 and NIST.</li><li>Experience in an information security role.</li><li>Solid knowledge of various information security frameworks.</li><li>Excellent problem-solving and analytical skills.</li><li>Ability to educate a non-technical audience about various security measures.</li><li>Effective verbal and written communication skills</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: AED8,000.00 - AED10,000.00 per month</p><p>Ability to commute/relocate:</p><ul><li>Dubai: Reliably commute or planning to relocate before starting work (Preferred)</li></ul><p>Application Question(s):</p><ul><li>EXPERIENCE IN ISO 27001 CONSULTANCY AND LEAD AUDITOR AND IMPLEMENTOR FOR ISO 9001 ,ISO 27001,ISO 42001</li></ul>

ISO 27001 Consultant Required

Search 10000+ Information security consultant jobs near you this October. New roles added regularly across leading industries. Apply today.