information security specialist

Forvis Mazars in Qatar

<div>About Us: 
Forvis Mazars LLC is a firm registered under Qatar Financial Center in Qatar with License Registration No. 00634 established on 26 February 2019. However, we have been operating in the Qatari market for 40+ years under our sister entity, Mazars Consultants Auditors and Partners, established under Ministry of Commerce and Industry.
 
We have been the firm of choice by the local market with a strong foothold in the State by being in the industry for more than 40 years. 
Forvis Mazars LLC is a fully Integrated partner with Forvis Mazars group with access to all global resources and expertise.
 
Forvis Mazars in Qatar has been operating and serving the Qatari market with a wide range of experience in auditing, taxation, consulting and financial advisory services. The partners and professional team have international and diversified experience and have a thorough knowledge of the market. 

 
Responsibilities:

<ul><li>Develop and implement cybersecurity strategies and controls.
</li>
</ul><ul><li>Administer firewalls, IDS/IPS, EDR, and DLP systems.
</li>
</ul><ul><li>Conduct vulnerability assessments and incident monitoring.
</li>
</ul><ul><li>Manage identity and access controls.
</li>
</ul><ul><li>Contribute to Business Continuity (BCP) and Disaster Recovery (DR) planning.</li> 

</ul>
 
Requirements:

<ul><li>Bachelor&rsquo;s degree in IT/Cybersecurity, CompTIA Security+ or CEH, CISM/CISSP preferred,
</li>
</ul><ul><li>5+ years&rsquo; experience.
</li>
</ul><ul><li>Advanced communication skills
</li>
</ul><ul><li>Leadership skill
</li>
</ul><ul><li>Fluent in English and Arabic (Speaking, reading and writing)
</li>
</ul>Ready to join with short notice 
<ul><li>
</li></ul> 
Benefits: 
Attractive salary and benefits.</div>

Information Security Specialist

Tadafur Consulting & Training

Job SummaryTadafur is seeking a dedicated and experienced Cybersecurity Specialist , You will be responsible for ensuring the confidentiality, integrity, and availability of our systems through active threat analysis, policy management, and compliance adherence. If you have a solid foundation in cybersecurity fundamentals and compliance standards like NIST, ISO 27001, HIPAA, and GDPR, we encourage you to apply.Key ResponsibilitiesThe Cybersecurity Specialist will focus on the following core areas:<ul><li>Monitor security events and analyze alerts according to approved systems.</li><li>Study incidents and analyze breaches or suspected intrusions, preparing detailed cybersecurity incident reports.</li><li>Conduct risk analysis and threat assessments to identify and prepare risk points for enhanced data protection.</li></ul>Vulnerability Management &amp; Testing:<ul><li>Conduct penetration tests and review internal system settings for cybersecurity compliance.</li><li>Identify security vulnerabilities and develop implementation plans to address them.</li><li>Prepare specialized technical reports and providing recommendations to improve security performance.</li><li>Policy &amp; Compliance:</li><li>Prepare and maintain cybersecurity policies and procedures in line with approved standards (e.g., NIST, ISO 27001).</li><li>Ensure compliance with all applicable policies and laws, including HIPAA and GDPR.</li><li>Prepare and submit reports regarding security recommendations and compliance.</li><li>Prepare periodic cybersecurity audit reports and conduct security audits.</li><li>Infrastructure Management:</li><li>Monitor and manage cybersecurity certificates and encryption technologies, such as SSL.</li><li>Ensure that VPN communication channels are secure.</li><li>Monitor the security of users&rsquo; access to systems and networks.</li></ul>Required Qualifications<ul><li>Education: Bachelor&rsquo;s degree in Computer Science or Information Security, or equivalent practical experience.</li></ul>Knowledge Base:<ul><li>Strong understanding of cybersecurity fundamentals and concepts.</li><li>Knowledge of cybersecurity standards such as NIST and ISO 27001.</li><li>Knowledge of encryption technologies (e.g., SSL) and VPN security communication methods.</li><li>Knowledge of compliance standards such as HIPAA and GDPR.</li></ul>Technical Skills:<ul><li>Ability to analyze threats and evaluate vulnerabilities.</li><li>Experience conducting penetration tests and preparing risk assessments.</li><li>Experience preparing security audits.</li></ul>Soft Skills:<ul><li>Good communication and teamwork skills.</li><li>Ability to prepare clear technical reports and recommendations.</li></ul>Job Type: Contract Contract length: 12 months

Information Security Specialist / Security Analyst

DICETEK LLC

Ensure the security, integrity, and compliance of enterprise systems and applications.
 
The ideal candidate will have extensive experience in information security, vulnerability assessment, and threat mitigation across cloud, on-premises, and hybrid environments.
 
Key responsibilities include implementing and monitoring security policies, managing access controls and identity management, securing databases (PostgreSQL, MSSQL), caching systems (Redis), and object storage (AWS S3), as well as protecting backend services, APIs, and integrations (including webMethods).
 
Hands-on knowledge of network security, encryption standards, firewalls, SIEM tools, and incident response is required.
 
Familiarity with DevSecOps practices, CI/CD security integration, Kubernetes security, and cloud security best practices is essential.
 
The Security Specialist will collaborate with developers, DevOps, solution architects, and business teams to identify risks, enforce compliance, conduct audits, and implement robust security controls to safeguard enterprise assets and data.

Security specialist

People Junction

Job Summary:We are looking for a highly skilled and versatile Information Security Specialist who can perform the roles of a Penetration Tester and Cybersecurity Specialist across diverse environments, including cloud platforms, backend APIs, web applications, mobile (Android &amp; iOS), and enterprise systems. This role is crucial in ensuring the security of our digital ecosystem by identifying vulnerabilities, implementing security measures, and safeguarding sensitive data against cyber threats.Security Assessments &amp; Penetration Testing:<ul><li>Conduct detailed penetration testing across multiple platforms, including web, mobile (iOS/Android), cloud environments (AWS, Azure, GCP), and APIs.</li><li>Perform vulnerability assessments using automated tools and manual testing to uncover security risks.</li><li>Simulate cyber-attacks and exploit discovered vulnerabilities to assess the overall security posture.</li><li>Develop threat models and provide mitigation strategies to minimize risk exposure.</li></ul>Cloud Security:<ul><li>Perform cloud security audits and reviews for AWS, Azure, or GCP environments.</li><li>Implement and monitor cloud security policies, ensuring alignment with industry standards (e.g., PCIDSS, NIST, ISO 27001, GDPR).</li><li>Conduct regular security reviews and configuration assessments of cloud-native applications and infrastructure.</li></ul>Backend API Security:<ul><li>Analyze and secure backend APIs against attacks such as injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and API endpoint misconfigurations.</li><li>Review API authentication and authorization mechanisms (OAuth, JWT) for potential vulnerabilities.</li><li>Implement secure coding practices in collaboration with development teams to minimize attack surfaces.</li></ul>Mobile Security (Android &amp; iOS):<ul><li>Conduct penetration testing on Android and iOS applications using static and dynamic analysis techniques.</li><li>Assess mobile app security for potential vulnerabilities like insecure data storage, improper SSL/TLS implementations, and weak encryption.</li><li>Provide guidance to mobile app development teams on secure coding best practices.</li></ul>Web Security:<ul><li>Perform comprehensive security testing of web applications, including OWASP Top 10 vulnerabilities, security misconfigurations, and business logic flaws.</li><li>Ensure secure configuration and hardening of web servers, firewalls, and application servers.</li></ul>Incident Response &amp; Threat Management:<ul><li>Lead incident response efforts, including threat identification, mitigation, and forensic investigation.</li><li>Conduct risk assessments, analyzing attack patterns, TTPs (Tactics, Techniques, and Procedures), and implement countermeasures.</li><li>Participate in cybersecurity drills and prepare reports on the effectiveness of defenses.</li></ul>Security Compliance &amp; Policy Development:<ul><li>Assist in developing, implementing, and maintaining security policies, procedures, and best practices across the organization.</li><li>Ensure compliance with industry standards such as PCI-DSS, HIPAA, GDPR, and others.</li><li>Work closely with legal and compliance teams to ensure data protection regulations are met across all environments.</li></ul>Collaboration &amp; Training:<ul><li>Provide security training and awareness sessions to development and operations teams.</li><li>Collaborate with DevOps teams to implement DevSecOps methodologies and ensure continuous security integration within the CI/CD pipeline.</li><li>Conduct red team exercises and penetration testing scenarios, briefing teams on the outcomes and helping them implement improvements.</li></ul>Required Skills and QualificationsEducation: Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field. A Master's degree is a plus.Certifications (Preferred but not required):<ul><li>CEH (Certified Ethical Hacker)</li><li>OSCP (Offensive Security Certified Professional)</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CISM (Certified Information Security Manager)</li><li>GPEN (GIAC Penetration Tester)</li><li>CompTIA Security</li></ul>Technical Skills:<ul><li>Penetration Testing Tools: Proficient with tools like Metasploit, Burp Suite, Wireshark, Nmap, Nessus, or OpenVAS.</li><li>Cloud Security: In-depth knowledge of cloud security frameworks and tools for AWS, GCP, and Azure.</li><li>Mobile Security: Experience with mobile security frameworks, and tools like Drozer, MobSF, FRIDA or similar.</li><li>API Security: Understanding of API security testing, OAuth, JWT, and encryption techniques.</li><li>Web Security: Experience with SAST/DAST tools like ZAP, Veracode, or SonarQube for web security assessments and code reviews.</li><li>Network Security: Knowledge of network security monitoring and firewall management.</li></ul>Experience:<ul><li>5-7 years of experience in information security, penetration testing, or vulnerability management.</li><li>Extensive experience with cloud platforms (AWS, Azure, GCP), securing APIs, and mobile application security.</li><li>Extensive experience in Mobile (iOS &amp; Android ) Pentesting , Web &amp; Apis Pentesting.</li><li>Experience in Securing the CI/CD Pipelines.</li><li>Must have experience working with PCI-DSS Compliance.</li><li>Strong knowledge of security protocols, cryptography, authentication mechanisms, and data protection.</li></ul>Job Type: Full-timePay: Rs400,000.00 - Rs700,000.00 per monthApplication Question(s):<ul><li>The company is located in DHA Phase 8, Lahore. Would you be willing to work on Onsite ?</li><li>Please share your resume at: https://tinyurl.com/CybersecurityWalee</li></ul>Experience:<ul><li>information security: 5 years (Required)</li></ul>Location:<ul><li>Lahore (Required)</li></ul>Work Location: In person

Infrastructure Security / Cybersecurity Specialist

Tennessee Board of Regents

Title: Info Security Specialist
 
Employee Classification: Other Professionals
 
Institution: System Office
 
Department: Information Technology
 
Campus Location: Tennessee Board of Regents System Office
 
Job Summary
 
The Information Security Specialist provides security-focused support to users and leads key security initiatives for the TBR Central Office and TBR institutions, while operating under the direct guidance of the Chief Information Security Officer (CISO).
 
This role is responsible for incident monitoring, collecting metrics, generating detailed security reports, and conducting security-related audits as needed. The specialist manages the operation and maintenance of security infrastructure, evaluates, recommends, and implements approved new technologies and innovations, addresses and resolves reported information security issues.
 
Additional responsibilities include incident management, risk assessment, implementation and oversight of security controls, delivery of awareness training, development and enforcement of security policies and compliance measures, and maintaining IT security architecture, policies, and standards.
 
This position may have the opportunity to work remote within the state of Tennessee but with periodic visits to the TBR System Office (Nashville, TN) at the employee’s expense, and potential travel to Tennessee TBR colleges may be necessary.
 
Job Duties
 
25% - Oversees security operations, security engineering, and compliance of information systems and services across the enterprise; develops, delivers and manages IT Security standards, best practices and architecture information that supports IT Security operations, engineering, and compliance across the enterprise; conducts studies within and outside the organization to ensure compliance with standards and conformity with industry security norms; consults with members of TBR community regarding security best practices and compliance; maintains awareness of how IT security services and systems affect the organization's security posture and exposure; weighs business needs against security concerns and articulates any issues to constituents and senior leadership; holds responsibility for the troubleshooting and resolution of reported information security issues; recognize and respond to information security incidents; analyze network traffic for anomalous activity and investigate as appropriate; identify and understand potential threats and vulnerabilities and recommend mitigations; perform digital forensics as part of incident response and in response to other community needs; author and edit incident reports; perform periodic security-focused risk assessments and audits of systems and tools; develop, implement, and refine solutions for security monitoring, detection, and response on TBR community systems; perform high-level analysis of complex and disparate computing systems, networks and data architectures to identify, rectify and prevent technical and information security vulnerabilities; scanning for vulnerabilities, evaluating scope and exposure, working with system and service owners to patch, isolate, or otherwise mitigate critical vulnerabilities; developing exposure metrics, detecting trends, and assisting the team in developing controls or defensive measures; use forensic, incident response, and process expertise to respond to and investigate system, service, or network attacks and breaches; applies IT security concepts to execute complex security controls to prevent hackers from infiltrating campus information or jeopardizing web-based programs for the campus; researches, analyzes and addresses attempted efforts to compromise security protocols and measures; evaluates and tests systems and applications for security vulnerabilities; maintains, uses and/or operates complex security systems; administers, tests or reviews complex security configurations to control access to systems; applies IT security concepts to use applicable encryption methods; gathers, analyzes, and summarizes information and reporting to management regarding the negative impact on the campus caused by theft, destruction, alteration or denial of access of information; applies it security concepts to select appropriate response to serious security incidents; - (Essential)
 25% - Maintains the Information Systems Security Program (ISP) for the TBR Central Office and works with TBR institutions on related security issues with regard to the ISSP; promotes TBR information systems reliability and accessibility, while protecting and defending against unauthorized access to systems, networks, and data; lead the planning, design, development, integration, testing, documentation, training, implementation and maintenance of TBR IT security systems and products; provide leadership through strong working relationships and collaboration across the TBR community to develop strategic goals for information security compliance and risk mediation; coordinates the Incident Response function of the TBR IT Security Office; oversees ongoing activities related to the development, implementation, and improvement of the TBR information security program in compliance with applicable federal and state laws and regulations and the TBR's information security policies; focusing on: security risk assessments (TBR, schools, departments, and vendors); risk management (including risk prioritization and mitigation); education and awareness; advises TBR personnel on managing effective security practices; develops and maintains strong working relationships to collaborate and partner with key stakeholders (across the TBR community) and external solution providers to advocate for appropriate security practices; plan, design, enforce, and audit security policies and procedures which safeguard the integrity of and access to TBR community systems - (Essential)
 15% - Develop and maintain an IT Security Architecture for TBR; lead and coordinate the development and maintenance of information systems security policies, procedures, standards, and guidelines, ensuring compliance with federal and state laws and regulations and Regents policies and standards; analyze new federal and state statutory requirements, TBR policies, and other security initiatives to determine changes necessary for adoption/compliance and makes appropriate recommendations; responsible for understanding the complete lifecycle of TBR's security technology; combines up-to-date knowledge of commercially-available and open source information security tools, solutions and services with firsthand knowledge of TBR's information security risks to play a leading role in recommending and assessing new security services; advises operating units at all levels on information security issues, recommended practices, and vulnerabilities; manages the program of providing security risk assessments to schools and departments across TBR; manages the program of assessing information security risks related to vendor-supplied services; oversees the program of network traffic analysis to identify potential security events and risks as a means to proactively address and mitigate identified weaknesses; oversees the investigation and resolution of information security privacy considerations related to research and intellectual property, and in projects related to risk mitigation; advises TBR personnel on managing effective security practices; responds appropriately with resources and information to requests submitted by internal and external auditing functions - (Essential)
 15% - Maintain the campus Cyber Incident Response Plan (CIRP) and foster security- and audit-related regular communications with campus Security Incident Response Teams (SIRT); Ensure monitoring of security-related information sources for security alerts and assess security breaches/ events, oversee appropriate corrective actions, inform the campus community, and identify needed changes based on new security technologies or threats; serve as the liaison with external agencies and organizations, including law enforcement, as needed for incident response and planning; oversee the development and implementa-tion of training programs and communications to make systems, network, and data users aware of and understand security policies and procedures; assists in managing security incidents across the TBR community; acts as the primary control point during information security incidents; assists in communicating progress to the TBR community, as appropriate, in managing security incidents; interfaces with law enforcement agencies and other government agencies to address security lapses and respond to information security issues; works with the IT staff of TBR, community and technical colleges and departments to help them maintain a high level of technical competence and a professional approach to handling confidential matters while maintaining a customer-focused attitude; investigate security incidents; perform computer forensics studies and maintain incident tracking records. prepare status reports on security matters; develop security risk analyses; keep management informed of risks and critical issues that might affect clients or TBR community security objectives - (Essential)
 15% - Maintain the campus Cyber Incident Response Plan (CIRP) and foster security- and audit-related regular communications with campus Security Incident Response Teams (SIRT); Ensure monitoring of security-related information sources for security alerts and assess security breaches/ events, oversee appropriate corrective actions, inform the campus community, and identify needed changes based on new security technologies or threats; serve as the liaison with external agencies and organizations, including law enforcement, as needed for incident response and planning; oversee the development and implementa-tion of training programs and communications to make systems, network, and data users aware of and understand security policies and procedures; assists in managing security incidents across the TBR community; acts as the primary control point during information security incidents; assists in communicating progress to the TBR community, as appropriate, in managing security incidents; interfaces with law enforcement agencies and other government agencies to address security lapses and respond to information security issues; works with the IT staff of TBR, community and technical colleges and departments to help them maintain a high level of technical competence and a professional approach to handling confidential matters while maintaining a customer-focused attitude; investigate security incidents; perform computer forensics studies and maintain incident tracking records. prepare status reports on security matters; develop security risk analyses; keep management informed of risks and critical issues that might affect clients or TBR community security objectives - (Essential)
 10% - Develop security awareness training programs; penetration testing timelines; security standards metrics and other security-related tools for distribution and implementation across the TBR community; promotes professional development of IT Security Awareness; ensures adherence to IT security best practices and standards across the organization; consults with and studies customers to address risks, gaps in compliance, and business practices; assists in development of policies and procedures; informs the TBR community of the ongoing status of IT security activities; perform training and guidance concerning encryption of devices and other communications security equipment; describe the benefits of multifactor authentication and its use; perform custodial duties and educate users regarding security relative to classified communications; advise management regarding proper use and operation of equipment associated with security maintenance; ensure that classified material is handled and safeguarded in accordance with applicable regulations; develop and maintain classified communications procedures; perform periodic physical checks of security containers in assigned areas; develop and provide phishing exercises for training purposes; manage security improvement projects; maintain knowledge of changing information security threats and technologies; provide recommendations for adaptation of new technologies, procedures, or policies; coach and direct staff on ways they can impact the security on their campuses; - (Marginal)
 10% - Contribute to the overall team environment by performing other tasks as assigned. - (Marginal)
 
Minimum Qualifications
 
<ul>
<li>A bachelor's degree in information technology or a similar area with minimum of 2 years relevant work experience, or an associate degree in a related field along with three years of relevant work experience.</li>
</ul>
o Candidates who do not possess a degree, but have at least four years of direct, relevant experience will also be considered for this position.
 <ul>
<li>Applicants must possess at least one relevant security certification such as CompTIA security+, ISC2 certified in cybersecurity (others may be considered)</li>
<li>Must have an appreciation for and an understanding of a two-year college mission.</li>
<li>Relevant work experience should come from at least two of the following domains: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, and Software Development Security.</li>
<li>Experience with service catalogs and service level agreements</li>
<li>Experience working in both technical support and end-user support environments</li>
<li>Demonstrated technical writing & documentation ability necessary</li>
</ul>
Preferred Qualifications
 
<ul>
<li>Experience in cloud security configurations</li>
<li>Excellent time management skills</li>
<li>Excellent critical thinking and problem-solving skills</li>
<li>Eager to expand skills and expertise</li>
<li>Demonstrated ability to analyze problems from multiple points of view, lead consensus building within groups with differing views, translate consensus into planned action</li>
<li>Candidate should have demonstrated experience in higher education</li>
</ul>
Knowledge, Skills, and Abilities
 
<ul>
<li>A self-starter who can work with a minimum amount of supervision</li>
<li>Demonstrated organizational skills</li>
<li>Demonstrated ability to understand customer needs and commitment to provide quality service</li>
<li>Demonstrated willingness to work flexible hours and troubleshoot when necessary</li>
<li>Excellent interpersonal and oral/written communication skills</li>
<li>A willingness and passion to learn new hardware/software security-related systems that are consistent with duties</li>
</ul>
Physical Demands / Working Conditions

Info Security Specialist

Realign

<div>Job Type: Full Time
Job Category: IT
Job Description
<div>Role - Oracle HCM Security Specialist 
Location &ndash; Remote 
FTE &amp; Contract</div><div></div><div> 
About the Role:</div><div></div><div> 
We are seeking an experienced Oracle HCM Security Specialist to manage and optimize security across all Oracle HCM Cloud modules. In this role, you will design and maintain secure access structures that protect sensitive HR data, ensure compliance with internal and external policies, and support seamless business operations. You&rsquo;ll collaborate with cross-functional teams in HR, Payroll, and IT to deliver a secure, efficient, and compliant HCM environment that supports the organization&rsquo;s people strategy.</div><div></div><div> 
Key Responsibilities:</div><div></div><ul><li> 
Design, configure, and manage HCM Security Console roles, including job roles, abstract roles, and data roles across all HCM modules.</li><li>Implement role-based access control (RBAC) and ensure compliance with segregation of duties (SoD) and data privacy standards.</li><li>Define and maintain security profiles (Person, Payroll, Absence, Workforce Structures, etc.) to manage data visibility and user access.</li><li>Manage user provisioning, role assignments, and perform periodic access reviews and audits.</li><li>Partner with functional teams (HR, Payroll, Benefits, Talent) to gather and validate security requirements.</li><li>Support quarterly Oracle Cloud updates by analyzing and testing security impacts.</li><li>Maintain documentation, audit logs, and compliance artifacts (SOX, GDPR, etc.).</li><li>Provide end-user training and guidance on security best practices.</li></ul><div>
HCM Modules Covered</div><ul><li>Core HR</li><li>Payroll</li><li>Absence Management</li><li>Compensation &amp; Benefits</li><li>Talent Management (Goals, Performance, Learning, Succession)</li><li>Oracle Recruiting Cloud (ORC)</li><li>Time &amp; Labor</li><li>Workforce Structures</li></ul><div></div><div> 
Qualifications:</div><div></div><ul><li> 
Bachelor&rsquo;s degree in Information Systems, Computer Science, Human Resources, or a related field.</li><li>3&ndash;7 years of experience in Oracle HCM Cloud Security Administration.</li><li>Strong understanding of Oracle Security Console, data roles, security profiles, and role provisioning workflows.</li><li>Hands-on experience across multiple HCM modules listed above.</li><li>Familiarity with HCM Extracts, OTBI, and BI Publisher security layers.</li><li>Knowledge of data privacy, SOX, and audit compliance frameworks.</li><li>Excellent communication, documentation, and analytical skills.</li></ul><div></div><div> 
Preferred Qualifications:</div><div></div><ul><li> 
Oracle Certified Implementation Specialist (HCM Cloud Security or Core HR).</li><li>Experience with Fusion HCM implementations or upgrades.</li><li>Knowledge of integration security (OIC, REST API, HDL).</li></ul> 

Required Skills
ANNOTATION SPECIALIST</div>

Oracle HCM Security Specialist-2

Search 10000+ Information security specialist jobs near you this December. New roles added regularly across leading industries. Apply today.

10000 information security specialist jobs NEAR_ME

Information Security Specialist

Information Security Specialist / Security Analyst

Security specialist

Security specialist

Infrastructure Security / Cybersecurity Specialist

Info Security Specialist

Oracle HCM Security Specialist-2