security compliance analyst

Road and Transport, RTA Dubai

Job Title Information Security Analyst - Roads and Transport Authority Dubai Job Description Information Security Analyst - Roads and Transport Authority Dubai Job Location: Dubai, United Arab Emirates Industry: Government Administration Function: Cyber security Gender: Any Candidate Nationality: All Nationalities (Priority for UAE Nationals) Job Type: Full-time Position Overview The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization. What You ll Do * Identify, recommend, and implement corrective actions in response to security violations * Conduct vulnerability research and recommend remediation plans * Analyze and test security controls for compliance with ISO27001, ISR, and other regulations * Perform security assessments to identify vulnerabilities in systems and applications * Monitor, analyze, and escalate security events from incident response queues * Create and maintain IT security standard operating procedures and configuration reports * Conduct technical analysis of malware, intrusion attempts, and system logs * Provide guidance on authentication and access systems aligned with security architecture requirements * Develop and maintain security policies, standards, and procedures to protect information assets * Support IT security awareness programs and assist with staff training initiatives * Perform continuous risk assessments and ensure ongoing compliance with standards * Collaborate with teams to ensure effective incident response and implement best practices Ideal Profile * Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university * Minimum of 3 years of relevant experience in IT security or related fields * Preferred certifications: CISSP, CISM, CISA, GIAC * Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing * Strong project management and analytical skills * Excellent communication and interpersonal abilities * Ability to adapt to multicultural environments and manage multiple priorities effectively

Information Security Analyst

Job Title Information Security Analyst - Roads and Transport Authority Dubai Job Description Information Security Analyst - Roads and Transport Authority Dubai Job Location: Dubai, United Arab Emirates Industry: Government Administration Function: Cyber security Gender: Any Candidate Nationality: All Nationalities (Priority for UAE Nationals) Job Type: Full-time Position Overview The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization. What You ll Do * Identify, recommend, and implement corrective actions in response to security violations * Conduct vulnerability research and recommend remediation plans * Analyze and test security controls for compliance with ISO27001, ISR, and other regulations * Perform security assessments to identify vulnerabilities in systems and applications * Monitor, analyze, and escalate security events from incident response queues * Create and maintain IT security standard operating procedures and configuration reports * Conduct technical analysis of malware, intrusion attempts, and system logs * Provide guidance on authentication and access systems aligned with security architecture requirements * Develop and maintain security policies, standards, and procedures to protect information assets * Support IT security awareness programs and assist with staff training initiatives * Perform continuous risk assessments and ensure ongoing compliance with standards * Collaborate with teams to ensure effective incident response and implement best practices Ideal Profile * Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university * Minimum of 3 years of relevant experience in IT security or related fields * Preferred certifications: CISSP, CISM, CISA, GIAC * Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing * Strong project management and analytical skills * Excellent communication and interpersonal abilities * Ability to adapt to multicultural environments and manage multiple priorities effectively

Information Security Analyst - Roads and Transport Authority

TechDefence Labs

<div><div>Role Overview:</div><div></div><div> 
Techdefence Labs is looking a proactive Sr. GRC Analyst who will assess and mitigate risks across on-premise and cloud environments, lead third-party/vendor security evaluations, and ensure compliance with frameworks like ISO 27001, SOC 2, NIST, and GDPR. The role includes managing vulnerability assessments, supporting audits, enhancing security architecture, and driving business continuity, while translating technical risks into clear, actionable recommendations.</div><div></div><div> 
Required Qualifications:</div> 
<div></div><ul><li>
This individual&rsquo;s primary day to day responsibilities is mentioned below (but are not limited to these):</li><li>
Plan and conduct end-to-end cybersecurity risk assessments for ICT assets (networks, servers, applications, endpoints, cloud), including threat/vulnerability identification, likelihood/impact analysis, risk scoring, and treatment plans.</li><li>
Lead third-party/vendor risk assessments: due diligence, security questionnaires, evidence reviews, control gap analysis, and ongoing monitoring aligned to ISO 27001 Annex A, SOC 2 trust services criteria, NIST controls, and GDPR requirements.</li><li>
Map assessment findings to GRC frameworks and regulatory requirements; produce compliance-ready reports, risk registers, and executive summaries.</li><li>
Collaborate with IT and engineering on security architecture reviews for networks, servers, and cloud; recommend hardening, segmentation, and secure configuration baselines.</li><li>
Support policy, standard, and procedure development for risk management, vulnerability management, incident response, access control, and asset management.</li><li>
Prepare materials for internal/external audits (ISO 27001, SOC 2) and respond to client security assessments and RFPs.</li><li>
Evaluate and secure cloud environments (AWS, Azure, GCP) by conducting cloud-specific risk assessments, reviewing identity and access management, ensuring workload segmentation, and checking adherence to cloud security posture management best practices.</li><li>
Assess compliance of cloud service providers with frameworks such as ISO 27017/27018, CIS Cloud Benchmarks, and guide the deployment of secure and resilient cloud architectures.</li><li>
Formulation and testing of Business Continuity and Disaster Recovery Plans; identify ICT risks impacting availability and participate in tabletop and failover exercises to ensure preparedness.</li><li>
Evaluate the use of cryptographic protocols and encryption solutions for data at rest, in transit, and in use across enterprise systems and cloud assets.</li><li>
Knowledge of security controls like Authentication, Authorization, Data Security, IAM</li></ul><div></div><div> 
Required Qualifications:</div><ul><li>
Demonstrated experience implementing or assessing against GRC frameworks: ISO/IEC 27001/27002, SOC 2, NIST CSF/800-53/800-171, and GDPR security/privacy controls.</li><li>
Experience with third-party risk management: security questionnaires, SIG/CAIQ or equivalent, due diligence evidence review, and continuous monitoring.</li><li>
Proficiency with vulnerability management tools and VAPT methodologies; ability to interpret CVEs/CVSS and prioritize remediation.</li><li>
Strong documentation and reporting skills with the ability to communicate technical risks to non-technical stakeholders.</li><li>
Understanding of secure configuration benchmarks (e.g., CIS), patching cycles, logging/monitoring fundamentals, and incident response coordination.</li><li>
Mandatory certifications CEH/Security +</li></ul><div></div><div> 
Preferred Qualifications:</div><ul><li>
Certifications: CISM, CISA, ISO 27001 Lead Auditor/Lead Implementer.</li><li>
Hands-on exposure to SIEM, EDR, SAST/DAST, cloud security posture management, and container security basics.</li><li>
Tools and Technologies:</li><li>
Vulnerability/VAPT: Nessus, Qualys, OpenVAS, Burp Suite, Nmap, Metasploit.</li><li>
Governance/Risk/Compliance: risk registers, control libraries, SIG/CAIQ, ISO 27001 documentation suites; ticketing for remediation tracking.</li><li>
Infrastructure: Windows/Linux server administration fundamentals, network device configuration review, cloud (AWS/Azure/GCP) security baselines.</li><li>
Monitoring: SIEM/EDR exposure for context during risk assessments and validation of remediation.</li></ul></div><div></div>

Associate Consultant

Northrop Grumman

<div>RELOCATION ASSISTANCE: No relocation assistance available
CLEARANCE TYPE: Secret
TRAVEL: Yes, 25% of the Time<h2 class="jobSectionHeader">
Description</h2>
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work &mdash; and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Put your skills to the test by pushing the boundaries of what&rsquo;s possible. From global defense to sustainment and modernization to mission readiness, your experience and ability will make it a reality. Our programs are built on equal parts of curiosity and collaboration. Our combined effort means our customers can connect and defend millions of people around the world. With Northrop Grumman, you&rsquo;ll have the opportunity to be an essential part of projects that will define your career, now and in the future.
Northrop Grumman Defense Systems is seeking an Principal or Sr. Principal Industrial Security Analyst (3/4) for our Northridge, CA location.
Roles and Responsibilities:<ul><li>
Develops and administers physical security programs and procedures for classified or proprietary materials, documents, and equipment. Studies and implements federal security regulations that apply to company operations</li><li>
Obtains rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies</li><li>
Prepares manuals outlining regulations, and establishes procedures for handling, storing, and keeping records, and for granting personnel and visitors access to restricted records and materials</li><li>
Conducts security education classes and security audits</li><li>
Ensures security compliance as a CSSO in accordance with DoDM 5205.07</li><li>
Responsible for offsite and subcontractor security standups and posture</li></ul>
ISA duties will include:<ul><li>
CSSO for offsite and subcontractor sites associated with the program</li><li>
Support a fast-paced, high-profile program; creating, maintaining, and leveraging working relationships with internal and external customers</li><li>
Study and implement company and federal security policies, regulations, and procedures that apply to company operations</li><li>
Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies</li><li>
Manage program security compliance and operations across multiple functions, including security SCIF and/or SAPF administration, PHYSEC, COMSEC, PERSEC, OPSEC, Contract Security, Security Education, Investigations, Visitor Control, and Document Control Management</li><li>
Develop and implement a security education and awareness program</li><li>
Conduct internal security audits. Investigate security violations and prepare reports specifying preventive action to be taken</li><li>
Ensure adherence to contractual guidance for classified programs and cleared facilities in accordance with the Security Statements of Work, DD Form 254, DoD Contract Security Classification Specifications guidance</li><li>
Assist program managers and professional staff in interpreting, applying, and complying with program Security Classification Guides (SCG)</li><li>
Provide personnel security (PERSEC) support to include but not limited to reviewing and processing required documentation in support of SCI and SAP nomination processes; maintain PERSEC databases; prepare and administer program indoctrination and debriefings; access, review, and submit clearance and access information using the appropriate government database and other information systems</li><li>
Provide facility security administration, documentation, and support: implement Standard Operating Procedures (SOP); conduct SCI and SAP security program self-inspections</li><li>
Provide security support for Sensitive Compartmented Information Facility (SCIF) and Special Access Program Facility (SAPF) build construction projects to include obtaining customer accreditation in accordance with SCI and SAP DoD Manuals, ICD, ICS Tech Spec, and other government requirements</li><li>
Manage and maintain UL-2050 Compliant Intrusion Detection Systems (IDS) and automated Access Control Systems (ACS)</li><li>
Other duties as assigned</li></ul>
Basic Qualifications:
Principal Industrial Security Analyst (level 3)<ul><li>
Must have a high school diploma or GED with at least 9 years of related experience; OR 5 year of experience with a bachelor's degree</li><li>
Experience with any of the following: Government manuals (32 CFR Part 117, NISPOM, DODM 5205.07, etc.)</li><li>
Strong working knowledge of basic office automation tool suites such as MS Office (Word, Excel, PowerPoint)</li><li>
Excellent customer service and communication skills</li><li>
Must have an active Secret clearance</li><li>
Ability to maintain flexibility to deal with changing priorities and deadlines.</li></ul><ul><li>
Ability to work extended hours, in a fast paced, deadline driven environment, excellent communication skills speaking, writing skills and organized skills enabling effective communications</li><li>
CSSO Experience</li><li>
Ability to travel</li></ul>
Basic Qualifications:
Sr. Principal Industrial Security Analyst (level 4)<ul><li>
Must have a high school diploma or GED with at least 12 years of related experience; OR 8 year of experience with a bachelor's degree</li><li>
Experience with any of the following: Government manuals (32 CFR Part 117, NISPOM, DODM 5205.07, etc.)</li><li>
Strong working knowledge of basic office automation tool suites such as MS Office (Word, Excel, PowerPoint)</li><li>
Excellent customer service and communication skills</li><li>
Must have an active Secret clearance</li><li>
Ability to maintain flexibility to deal with changing priorities and deadlines.</li></ul><ul><li>
Ability to work extended hours, in a fast paced, deadline driven environment, excellent communication skills speaking, writing skills and organized skills enabling effective communications</li><li>
CSSO Experience</li><li>
Ability to travel</li></ul>
Preferred Qualifications:<ul><li>
Experience Leading Security Teams from Subcontractors and Offsite</li><li>
Ability to work independently and follow projects through to completion.</li><li>
Current Top-Secret clearance</li><li>
Self-starter with minimal supervision</li><li>
Security experience in a manufacturing environment</li><li>
Supply Chain Security Experience</li></ul>
Primary Level Salary Range: $94,200.00 - $141,200.00
Secondary Level Salary Range: $117,500.00 - $176,300.00
The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.</div>

Principal/ Sr. Principal Industrial Security Analyst (level 3/4)

<div>RELOCATION ASSISTANCE: Relocation assistance may be available
CLEARANCE TYPE: Secret
TRAVEL: Yes, 10% of the Time<h2 class="jobSectionHeader">
Description</h2>
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work &mdash; and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
At the heart of Defining Possible is our commitment to missions. In rapidly changing global security environments, Northrop Grumman brings informed insights and software-secure technology to enable strategic planning. We are looking for innovators who can help us keep building on our wide portfolio of secure, affordable, integrated, and multi-domain systems and technologies that fuel those missions. By joining in our shared mission, we &rsquo;II support yours of expanding your personal network and developing skills, whether you are new to the field, or an industry thought leader. At Northrop Grumman, you &rsquo;II have the resources, support, and team to do some of the best work of your career.
Northrop Grumman Mission Systems sector is seeking an Industrial Security Analyst 2/3 to join our team of qualified, diverse individuals in Baltimore, MD.
This position will support multiple programs under our Advanced Mission Capabilities (AMC) business area as it relates to all applicable classified federal, contractual, customer and company requirements.
The role involves supporting a dynamic, high-profile program and building relationships with internal and external stakeholders. Key responsibilities include developing and managing security protocols for classified materials, implementing a multi-disciplined security program, and ensuring compliance with federal regulations. The position requires conducting security education, investigating violations, preparing reports, and maintaining knowledge of relevant security manuals and procedures (such as DoD 5205.07 SAP Manual, ICD 705, ICD 704, and NISPOM).
We are seeking a candidate with exceptional customer service and communication skills. The ideal individual will demonstrate the ability to work independently and see projects through to completion while maintaining flexibility to adapt to changing priorities and deadlines. A self-starter who thrives with minimal supervision, the candidate should be willing to work extended hours in a fast-paced, deadline-driven environment. Strong spoken and written communication skills, along with excellent organizational abilities, are essential for effective interactions. Proficiency in computer and desktop office software products is also required.
The position can be filled at a Level 2 or 3.
Basic Qualifications for a Level 2:<ul><li>
2 Years of CSSO or relevant experience with Bachelors; OR; an additional 4 years of applicable work experience may be substituted for Bachelor&rsquo;s Degree.</li><li>
Current Active Secret clearance with ability to obtain/maintain a Top Secret clearance.</li><li>
US Citizenship required.</li><li>
In-scope investigation (T3, T3R, T5, T5R, SSBI, SBPR, PPR) completed within last 6 years or current enrollment in Continuous Evaluation (CE) program.</li><li>
Ability to meet enhanced security requirements and obtain/maintain SAP eligibility and access.</li><li>
Experience and knowledge of systems such as JADE, DISS or SIMS.</li><li>
Familiarity with 32 CFR Part 117 (NISPOM), DoD 5205.07 and security instructions.</li><li>
Experienced in meticulous record-keeping and responsible for accurate data input into multiple databases/spreadsheets.</li><li>
Experience with briefing and training personnel, customers, and stakeholders at all levels.</li><li>
Experience with computer and desktop Microsoft office software.</li></ul>
Basic Qualifications for a Level 3:<ul><li>
5 Years of CSSO or relevant experience with a Bachelors; OR; 3 Years with Masters; an additional 4 years of applicable work experience may be substituted for Bachelor&rsquo;s Degree.</li><li>
Current Active Secret clearance with ability to obtain/maintain a Top Secret clearance.</li><li>
US Citizenship required.</li><li>
In-scope investigation (T3, T3R, T5, T5R, SSBI, SBPR, PPR) completed within last 6 years or current enrollment in Continuous Evaluation (CE) program.</li><li>
Ability to meet enhanced security requirements and obtain/maintain SAP eligibility and access.</li><li>
Experience and knowledge of systems such as JADE, DISS or SIMS.</li><li>
Familiarity with 32 CFR Part 117 (NISPOM), DoD 5205.07 and security instructions.</li><li>
Experienced in meticulous record-keeping and responsible for accurate data input into multiple databases/spreadsheets.</li><li>
Experience with briefing and training personnel, customers, and stakeholders at all levels.</li><li>
Experience with computer and desktop Microsoft office software.</li></ul> 
Preferred Qualifications:<ul><li>
Top Secret clearance.</li><li>
Experience with customer high side networks to include CV2, CORE, CNET, JADE, etc.</li><li>
Strong working knowledge of basic office automation tool suites such as MS Office (Word, Excel, PowerPoint).</li><li>
OPSEC program experience.</li></ul>
Primary Level Salary Range: $87,000.00 - $130,600.00
Secondary Level Salary Range: $0.00 - $0.00
The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.</div>

Industrial Security Analyst 2/3

1LINK (Pvt) Ltd.

<ul><li>Manage assessments of PCI Security Standards i.e. PCI DSS, PCI 3DS, PCI PIN Security, PCI Card Production) and any other as per the requirements&ndash;</li><li>Ensure execution of compliance reviews required as per PCI Standards&ndash;Stay updated on the developments of different PCI Standards</li><li>Review policies and procedures from compliance perspective&ndash;Coordinate with cross functional teams within the organization</li><li>Coordinate with Qualified Security Assessors</li><li>Identify and implement security compliance requirements&ndash;Assist in the regulatory and global compliance issues</li></ul>Job Type: Full-timeWork Location: In person

Deputy Manager / Assistant Manager Global Compliance

ibex

<div>
 
 As a member of the Information Security team, this position will maintain SOC 2 Type II certification, and practice to ensure that the IBEX complies with industry and regulatory requirements like ISO 27001/2, SOC 2 Type II and SOX audit etc. This position will liaise closely with internal business units, HR and other relevant departments.
 
 
 
 
 
 
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 <ul>
 <li>
 Develop/implement information security policies and procedures
 </li>
 <li>
 Lead SOC 2 Type II project implementation
 </li>
 <li>
 Identification of risks and implementation of required controls
 </li>
 <li>
 Support internal audits
 </li>
 <li>
 Review/update of project documentation
 </li>
 <li>
 Must have analytical skills in order to assess information and identify potential risks and should have problem-solving skills to be able to determine how to reduce those risks.
 </li>
 <li>
 Support global cybersecurity risk &amp; compliance function
 </li>
 </ul>
 
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 <ul>
 <li>
 BS/MS in IT or relevant field
 </li>
 </ul>
 
 
 
 
 Required Skills
 
 
 
 
 
 <ul>
 <li>
 2-3 years of experience
 </li>
 </ul>
 
 
 
 
 
 
 
 Preferred Skills
 
 
 
 
 
 <ul>
 <li>
 Experience in information security compliance
 </li>
 </ul>
 
 
 
 
 Timings: 03:00pm-12:00 midnight
 
 
 
</div>

Information Technology Security Analyst

Search 10000+ Security compliance analyst jobs near you this November. New roles added regularly across leading industries. Apply today.