information security specialist

Nair Systems

<p><b>Job Location</b></p>
 
 <div>
 <p> <b><span>Dubai, <br> United Arab Emirates</span> </b></p>
 </div>
 
 <div>
 <div>
 <p><b>Experience</b></p>
 </div>
 <div>
 <p> <b><span>4 to 12 years</span> </b></p>
 </div>
 </div>
 <div>
 <div>
 <p><b>Qualification Level</b></p>
 </div>
 <div>
 <p> <b><span>Graduate</span> </b></p>
 </div>
 </div>
 <div>
 <div>
 <p><b>Job Function</b></p>
 </div>
 <div>
 <p> <span><b>IT - Hardware</b><br> IT - Software<br> </span> </p>
 </div>
 </div>
 <div>
 <div>
 <p>Skillset</p>
 </div>
 <div>
 <p> <span>Information security, Bank</span> </p>
 </div>
 </div>
 <div>
 <div>
 <p>Preferred Jobseekers</p>
 </div>
 <div>
 <p>Jobseekers from any country</p> 
 <div>
</div>
 <div>
<span>Nair Systems is currently looking Information Security   Specialist (Operations) for our UAE operations with the following terms &amp; conditions.<br> <br>Education Level Required: <br>  Bachelor s degree in computer science, Network/ Cyber Security or related information technology field. <br>  Professional / Technical Qualifications / Diplomas: <br>  Platform specific (e.g. SIEM/ Networking/ Operating System) certifications. <br>  Security (e.g. SANS/ ISC2 / CEH/ CISSP) certifications<br> <br><b>Experience: <br></b>7 - 10 years  experience in Information Security or related field. <br> <br><b>Specialist Skills: <br></b>  In-depth knowledge and understanding in information security and technology infrastructure, ensuring robust protection of systems and applications. <br>  Expertise in enforcing cloud security policies, IAM configurations, and data protection practices to ensure a secure infrastructure. <br>  Proficient in managing and optimizing CSPM tools to continuously monitor and enforce security best practices. <br>  Experienced in reviewing and enhancing security configurations and architectures to align with industry best practices and compliance requirements. <br>  Proficient in managing API and Kubernetes security policies, including implementing posture management, access controls, encryption, and continuous monitoring to ensure a secure environment. <br>  Skilled in conducting thorough vulnerability assessments and comprehensive risk analyses, prioritizing risks and implementing remediation strategies to secure systems. <br>  Proficiency in configuring and managing DLP tools, data classification, policy enforcement, risk assessment, compliance knowledge, and integrating with security systems to prevent unauthorized data loss. <br>  Skilled in configuring, optimizing, and managing Security Information and Event Management (SIEM), EDR, DAM platforms for real-time threat detection and effective incident response. <br>  Committed to enhancing organizational security posture through ongoing monitoring, assessment, and optimization of security tools and processes. <br>  Demonstrates innovative thinking by exploring alternative approaches and developing conceptual frameworks to address complex security challenges. <br>  Possesses strong communication skills, capable of conveying complex security concepts to senior non-technical stakeholders in clear, jargon-free language. <br>  Adept at managing multiple concurrent projects, effectively prioritizing tasks to meet organizational demands and deadlines.<br></span></div>
 </div>
 <div>
 <div>
</div>
 </div>
 <div>
 <div>
</div></div></div>

Information Security Specialist (Operations)

Forvis Mazars in Qatar

<div><p><b>About Us:</b><br>
Forvis Mazars LLC is a firm registered under Qatar Financial Center in Qatar with License Registration No. 00634 established on 26 February 2019. However, we have been operating in the Qatari market for 40+ years under our sister entity, Mazars Consultants Auditors and Partners, established under Ministry of Commerce and Industry.
<br>
We have been the firm of choice by the local market with a strong foothold in the State by being in the industry for more than 40 years.<br>
Forvis Mazars LLC is a fully Integrated partner with Forvis Mazars group with access to all global resources and expertise.
<br>
Forvis Mazars in Qatar has been operating and serving the Qatari market with a wide range of experience in auditing, taxation, consulting and financial advisory services. The partners and professional team have international and diversified experience and have a thorough knowledge of the market.</p><br>
<p></p>
<p><br>
<b>Responsibilities:</b></p>
<p></p>
<ul><li>Develop and implement cybersecurity strategies and controls.<p></p>
</li>
</ul><ul><li>Administer firewalls, IDS/IPS, EDR, and DLP systems.<p></p>
</li>
</ul><ul><li>Conduct vulnerability assessments and incident monitoring.<p></p>
</li>
</ul><ul><li>Manage identity and access controls.<p></p>
</li>
</ul><ul><li>Contribute to Business Continuity (BCP) and Disaster Recovery (DR) planning.</li><br>
<p></p>
</ul>
<p><br>
<b>Requirements:</b></p>
<p></p>
<ul><li>Bachelor&rsquo;s degree in IT/Cybersecurity, <b>CompTIA Security+ or CEH</b>, <b>CISM/CISSP preferred</b>,<p></p>
</li>
</ul><ul><li>5+ years&rsquo; experience.<p></p>
</li>
</ul><ul><li>Advanced communication skills<p></p>
</li>
</ul><ul><li>Leadership skill<p></p>
</li>
</ul><ul><li>Fluent in English and Arabic (Speaking, reading and writing)<p></p>
</li>
</ul>Ready to join with short notice<br>
<ul><li>
</li></ul><p></p><p><br>
<b>Benefits:</b><br>
Attractive salary and benefits.</p></div><p></p>

Information Security Specialist

ريناد المجد

<p>As a Cybersecurity Specialist, you will be the cornerstone of our project's security posture. You will be responsible for designing, implementing, and overseeing security measures to protect our digital assets, ensure compliance with national regulations, and embed security into every layer of the enterprise architecture.</p><p><b>Responsibilities</b></p><ul><li><b>Security Architecture &amp; Implementation:</b> Design, implement, and manage security controls and protocols within the enterprise architecture framework.</li><li><b>Compliance &amp; Governance:</b> Ensure strict adherence to all Saudi Arabian cybersecurity, safety, health, and environmental regulations. Lead efforts to achieve and maintain compliance with international standards.</li><li><b>Risk Management:</b> Conduct comprehensive risk assessments, vulnerability scans, and penetration testing. Develop and maintain a continuous risk mitigation strategy.</li><li><b>Incident Response:</b> Serve as a key player in the security incident response team, leading investigations and remediation efforts.</li><li><b>Policy Development:</b> Develop, maintain, and enforce cybersecurity policies, procedures, and standards.</li><li><b>Audit &amp; Assurance:</b> Prepare for and manage internal and external security audits, providing all necessary documentation and evidence.</li></ul><p><b>Qualifications</b></p><ul><li><b>Mandatory Requirements:</b></li><li>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.</li><li>A minimum of 5 years of professional experience in IT, with at least 3 years of specialized experience in cybersecurity.</li><li>Fluency in Arabic (both written and spoken) is a mandatory requirement for this role.</li><li>Must hold one or more of the following professional certifications:</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CISM (Certified Information Security Manager)</li><li>CISA (Certified Information Systems Auditor)</li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor</li></ul><p>the location in <b>Taif -Saudi Arabia</b></p><p>Job Type: Full-time</p><p>Pay: From &#65020;2.00 per month</p><p>Ability to commute/relocate:</p><ul><li>Taif: Reliably commute or planning to relocate before starting work (Preferred)</li></ul><p>Application Question(s):</p><ul><li>What is your notice period in days ?</li><li>Where do you live ?</li><li>What is your salary expectation ?</li><li>Are you Saudi Arabian ?</li></ul><p>Experience:</p><ul><li> cybersecurity: 3 years (Preferred)</li></ul>

Cyber Security Specialist

Equinox Technologies

<div> <p> <strong>Applications invited from experienced candidates for the post of Senior Technical Specialist   Cybersecurity. </strong> </p> <p>Candidates with minimum 5+ years  experience covering security areas like external appliance, end point protection, operating systems, cloud systems, knowledge of managing multiple sites having experience executed DLP plans and vulnerability management software tool preferred. Industry certifications desirable   CISM, CISSP or CISA, Global Information Assurance Certification.</p> <p>Educational qualification preferred is Bachelors or Masters degree in computer science, Business Administration in Information Technology, or a related discipline.</p> <p> <strong>Responsibilities</strong> </p> <ul> <li>Participate in the design, planning, and implementation of new projects / technologies.</li> <li>Daily monitoring and administration of deployed security infrastructure tools, as per the requirement.</li> <li>Conduct penetration testing, vulnerability assessment over infrastructure and applications to identify existing vulnerabilities, prepare report with remediation plans, and follow-up with relevant team until closure.</li> <li>Monitor security logs for all the critical infrastructure systems to identify potential threats, vulnerabilities and indicators of compromise, and report anomalies to the management.</li> <li>Create and maintain threat modelling documentation for the systems and application being used by the organization.</li> <li>Conducting technical security awareness sessions for the IT and other technical teams as required.</li> <li>Develop cybersecurity awareness posters, wallpapers, screensavers, newsletters, advisories, etc. as and when required.</li> <li>Managing complete information security incident management framework.</li> <li>Monitoring and management of overall information security incidents, analysis, containment, response, remediation and post-incident analysis.</li> <li>Provide operational support including responding to incidents, service requests and develop, update, and implement security measures and controls.</li> <li>Secure digital files and information systems, protecting them from unauthorized access or tampering.</li> <li>Provide technical support and monitor security access and perform regular internal and external security audits.</li> <li>Design intruder detection and prevention systems to prevent network invasion.</li> <li>Analyze the source of security breaches, recommend and implement security tools and anti-malware software.</li> <li>Determine, adapt, and maintain corporate security procedures and policies.</li> </ul> <p>Interested candidates please fill in the form on the page and submit your latest updated CV with the post applied for our review.</p></div>

Specialist - Cyber Security

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is looking for a highly skilled <b>Senior Specialist - Corporate IT Security Operation</b> to join our innovative team. In this critical role, you will oversee our corporate IT security operations, ensuring the protection of our digital resources and infrastructure against cyber threats. You will work actively to maintain the confidentiality, integrity, and availability of our information systems.</p><p>
Your duties will involve implementing security measures, monitoring security incidents, and collaborating with various teams within the organization to enhance our IT security posture.</p><h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3><ul>
<li>Manage and oversee the daily operations of corporate IT security systems, including threat detection and incident response.</li>
<li>Develop and implement comprehensive security policies, procedures, and best practices tailored to corporate IT needs.</li>
<li>Monitor and analyze security alerts, events, and logs to identify potential threats and vulnerabilities.</li>
<li>Perform regular security assessments and risk analysis to proactively identify areas for improvement.</li>
<li>Coordinate and collaborate with IT and other departments to ensure seamless integration of security measures across corporate systems.</li>
<li>Lead incident response efforts, providing expertise in containment, investigation, and remediation of security incidents.</li>
<li>Educate and train employees on corporate IT security policies and best practices, fostering a culture of security awareness.</li>
<li>Prepare detailed reports on security incidents, audit findings, and compliance status for senior management.</li>
<li>Stay informed of the latest cybersecurity trends, threats, and technologies, implementing updates as necessary.</li>
</ul><p><b>Requirements</b></p><ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>5+ years of experience in IT security operations, with a strong focus on corporate environments.</li>
<li>In-depth knowledge of security frameworks, best practices, and compliance standards.</li>
<li>Experience with SIEM tools, incident response, and cybersecurity monitoring solutions.</li>
<li>Strong analytical and problem-solving skills with the ability to work under pressure.</li>
<li>Excellent leadership and communication skills, capable of conveying complex security concepts to diverse audiences.</li>
<li>Relevant certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar) are preferred.</li>
</ul><p><b>Benefits</b></p><p>
Comprehensive benefits package</p></div>

Senior Specialist - Corporate IT Security Operation

Steampunk

<div>Overview:
<div>
The <b>Cyber Risk Management Specialist (CRMS)</b> will specialize in in-depth knowledge of the program's cyber security hygiene, DevSecOps, Risk Management Framework (RMF), Assessment and Authorization (A&amp;A), Federal Risk and Authorization Management Program (FedRAMP) compliance, continuous ATO (cATO) and continuous monitoring. A solid grasp on confidentiality, integrity, and availability (CIA) security concepts is required. The candidate will be responsible for the technical implementation and enforcement of security hardening, vulnerability management, scan analysis, data analysis for metrics reporting, cloud environments, compliance with Federal regulation and policy, and commercial best practices relating to cyber security. The candidate must have the ability to be flexible and adaptive to a fast-paced, fluid business environment.</div>
Contributions:
<div>
The role requires strong procedural knowledge of NIST SP 800-37 Risk Management Framework (RMF) for Information Systems and Organization, NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations, NIST SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, FedRAMP requirements, cloud environments, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security. The CRMS is expected to efficiently learn and adapt to rapidly changing federal governance frameworks and standards of practice, to include risk treatments for modern and emerging technologies (e,g, AI, blockchain, microservices).</div><div></div><div><br>
The Cyber Risk Management Specialist performs a range of functions before, during, and after an authorization is granted:</div><ul><li>
Integrate security into DevOps effectively at every stage of the software development life cycle (SDLC).</li><li>
Identify security holes and potential breaches, work through multifaceted security issues, and create effective solutions based on understanding of risk posture and treatments.</li><li>
Develop and implement tactical strategies for seamless automation to optimize the IT infrastructure.</li><li>
Apply specialized knowledge of financial audit standards, classified system IA requirements, and Privacy Act requirements.</li><li>
Implement the NIST Special Publication (SP) 800 family of publications, particularly those associated with the Risk Management Framework.</li><li>
Evaluating system, network, or infrastructure security controls against requirements such as FISMA, FIPS, and NIST guidelines</li><li>
Apply in-depth, hands-on knowledge of the FedRAMP regulations, process, and requirements to lead project and initiative teams in accrediting cloud products and services.
</li><li>Support external audits, data calls, and the Authorization to Operate (ATO) process by coordinating with organization system owners, engineers, CSP&rsquo;s and Third-Party Assessment Organizations (3PAO).</li><li>
Positively impact the organization&rsquo;s goals and operational mission through various forms of metric performance measuring tools used to evaluate adherences to compliance.</li><li>
Advise clients on FedRAMP requirements and provide security guidance on the implementation of security compliance controls per technical, management, and operational requirements.</li><li>
Implement, monitor, and assess NIST SP 800-53 security controls for cloud environments to ensure compliance with FedRAMP requirements and governance models.</li><li>
Ensure ongoing compliance with FedRAMP policy and requirements through monthly deliverables, regular vulnerability scanning, penetration testing, contingency testing, and annual security assessments performed by a 3PAO.</li><li>
Support ATO, cATO, and continuous monitoring activities to include security documentation, audit log, security incidents, and risk assessment.</li><li>
Review and manage Plan of Action &amp; Milestones (POA&amp;M), to include remediation tracking and reporting.</li></ul><br>
<div></div>
Qualifications:
<div><b>
Required</b></div><br>
<div></div><ul><li>
Ability to obtain a U.S. government Security Clearance</li><li>
Master's Degree and 6 year of cyber and FISMA experience; OR<ul><li>
Bachelor's Degree and 8 years of cyber and FISMA experience; OR</li><li>
No degree and 12 years of experience, 10 of which must be in cyber and FISMA</li></ul></li><li>
Possesses at least one professional certification: CISSP, CASP, CISA, CISM or GSLC</li></ul><div></div><div><b><br>
Preferred</b></div><ul><li>
Experience in FISMA, cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security.</li><li>
Experience in Information Security processes to include RMF, FedRAMP, Compliance, Continuous Monitoring, and Annual Assessments.</li><li>
Certifications in one or more of the following: CISSP, CRICS, CCSP, CAP/CGRC.</li><li>
Certifications in one or more of the following: AWS Certified Solutions Architect, AWS Certified Security, Microsoft Certified Solutions Architect, MCSE Cloud Platform and Infrastructure</li><li>
Experience conducting assessments in a 3PAO, C3PAO, or risk auditing organization is desirable, but not required.</li><li>
Experience supporting systems in Agile environments.</li></ul>
About <b>steampunk</b>:
<div>
Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $100,000 to $150,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk&rsquo;s total compensation package for employees. Learn more about additional Steampunk benefits here.</div><div><br>
</div><div><b>Identity Statement</b></div><div>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</div><div></div><div><br>
Steampunk is a <b>Change Agent</b> in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our <b>Human-Centered delivery methodology</b>, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an <b>employee owned company</b>, we focus on investing in our employees to enable them to do the greatest work of their careers &ndash; and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.</div><div></div><div><i><br>
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.</i></div></div>

Cyber Risk Management Specialist

Accenture

<p><b>Key Responsibilities:</b></p>
<ul>
<li>As an Application Security Specialist at Accenture, you will play a pivotal role in ensuring the security of applications and cloud environments. Your responsibilities will include:</li>
<li>Application Security Testing: Design, implement, plan, and execute comprehensive application security testing for on-premises and SaaS applications. Conduct security tests such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API Security Testing, Web Penetration Testing, Threat Modeling, and Security Architecture Reviews. Utilize industry-leading tools such as Veracode, Microfocus Fortify, WebInspect, Burp Suite, and Synopsis. Operate within DevSecOps frameworks and standalone environments to ensure robust security measures.</li>
<li>Native Application Security Capabilities: Design, implement, and manage security capabilities for SaaS and enterprise systems, including: Oracle Risk Management Cloud (RMC) for Oracle HCM and Finance applications, covering AAC (Advanced Access Controls), AFC (Advanced Financial Controls), and FRC (Financial Reporting Compliance) for segregation of duties (SOD) and custom role management. SAP Governance, Risk, and Compliance (GRC) solutions.</li>
<li>Cloud Security Capabilities: Design, implement, and manage native cloud security capabilities for Oracle Cloud IaaS and PaaS services, including: Web Application Firewall (WAF) and Security Lists. Cloud Guard and Data Guard for enhanced security monitoring and data protection. Identity Domain, UAE PASS integration, and Database Activity Monitoring (DAM). Key Vault / Hardware Security Module (HSM) for secure key management. Oracle Integration Cloud (OIC) and Autonomous Database (ADB) security hardening. API Gateways for secure API management.</li>
</ul>

Application Security Specialist

Search 10000+ Information security specialist jobs near you this November. New roles added regularly across leading industries. Apply today.