senior information security analyst

Agility

<div>
 
 
 Role Summary:
 
 
 
 We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 
 
 
 Your Responsibilities:
 
 
 
 &nbsp;Compliance and GRC Management
 
 <ul>
 <li>
 &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
 </li>
 </ul>
 <ul>
 <li>
 Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
 </li>
 <li>
 Act as the primary auditee and point of contact for all internal and external information security audits
 </li>
 <li>
 Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
 </li>
 <li>
 Drive a culture of security and resilience across the organization
 </li>
 </ul>
 
 &nbsp;Security Controls &amp; Technical Oversight
 
 <ul>
 <li>
 &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
 </li>
 </ul>
 <ul>
 <li>
 Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
 </li>
 <li>
 Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
 </li>
 <li>
 Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
 </li>
 <li>
 Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
 
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 
 Your Qualifications:
 
 
 <ul>
 <li>
 Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
 </li>
 </ul>
 <ul>
 <li>
 Experience: A minimum of 5 - 10 years of experience in a similar environment
 </li>
 <li>
 Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
 </li>
 <li>
 Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
 </li>
 <li>
 Language: Must be fluent in English, with Arabic as an added advantage.
 
 </li>
 </ul>
 
 
 Your Competencies:
 
 
 
 Technical:
 
 <ul>
 <li>
 Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
 </li>
 <li>
 Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
 </li>
 <li>
 Tools: Practical experience with Vulnerability and Risk Assessment Tools and familiarity with SIEM platforms
 </li>
 <li>
 Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
 </li>
 </ul>
 
 &nbsp;Behavioral:
 
 <ul>
 <li>
 Teamwork and Collaboration
 </li>
 <li>
 Quality and Results focused
 </li>
 <li>
 Learning Agility
 </li>
 <li>
 Business Acumen
 </li>
 <li>
 Decision Making
 </li>
 <li>
 Digital Savvy
 </li>
 <li>
 Agility and Adaptability
 </li>
 <li>
 Negotiation and influence
 </li>
 <li>
 Planning and Organizing
 </li>
 </ul>
</div>

Senior Information Security Analyst - Compliance & GRC

PC99 Technologies & Innovation Group

Job Title: Senior Cybersecurity AnalystJoin a Forward-Thinking Cybersecurity TeamPC99 Technologies &amp; Innovation Group is seeking a highly skilled Senior Cybersecurity Analyst to help protect critical systems, data, and infrastructure in an evolving threat landscape. This role is ideal for professionals who enjoy solving complex security challenges, working with advanced tools, and making a measurable impact on organizational security.What You&rsquo;ll Do<ul><li>Monitor, detect, and respond to cybersecurity threats using SIEM and SOC tools</li><li>Conduct vulnerability assessments, penetration testing, and risk analysis</li><li>Investigate security incidents and perform root cause analysis</li><li>Develop and implement security policies, standards, and procedures</li><li>Collaborate with IT teams to strengthen network, cloud, and endpoint security</li><li>Analyze threat intelligence and proactively mitigate risks</li><li>Ensure compliance with frameworks such as ISO 27001, NIST, and CIS</li><li>Lead incident response efforts and recommend remediation strategies</li><li>Prepare reports and communicate findings to technical and non-technical stakeholders</li></ul>What We&rsquo;re Looking For<ul><li>5+ years of experience in cybersecurity, information security, or SOC environments</li><li>Strong knowledge of SIEM platforms, IDS/IPS, firewalls, and endpoint security tools</li><li>Experience with vulnerability management and penetration testing</li><li>Familiarity with cloud security (AWS, Azure, or GCP)</li><li>Understanding of security frameworks such as ISO 27001, NIST, or CIS</li><li>Relevant certifications preferred (CISSP, CEH, CISM, Security+)</li><li>Strong analytical and problem-solving skills</li><li>Clear communication and documentation abilities</li></ul>Why Join PC99 Technologies &amp; Innovation Group<ul><li>Work on high-impact cybersecurity projects across industries</li><li>Collaborative and innovation-focused environment</li><li>Opportunities for professional development and career progression</li><li>Exposure to modern security technologies and enterprise systems</li></ul>Compensation and Schedule<ul><li>Competitive salary with performance-based incentives</li><li>Full-time position with standard business hours and occasional on-call rotation</li></ul>About the CompanyPC99 Technologies &amp; Innovation Group is a growing technology firm specializing in cybersecurity, digital transformation, and advanced IT solutions. The company partners with organizations to strengthen their security posture and deliver scalable, future-ready systems.Apply NowIf you are ready to advance your cybersecurity career and work on meaningful security initiatives, submit your application today.Pay: RO1,800.000 - RO3,200.000 per monthWork Location: In person

Senior Cybersecurity Analyst

Mindstream

Hiring: Senior Business Analyst &ndash; InfoSec &amp; Fraud Management Location: Qatar Sector: Banking Duration: 12 Months and ExtendableWe are seeking a Senior Business Analyst with a strong background in Information Security (InfoSec), IT Application Access Management, Data Privacy Compliance, Enterprise Fraud Management Systems, and IT Disaster Recovery for a leading banking project in Qatar.Key Responsibilities<ul><li>Collaborate with cross-functional teams to gather, analyze, and document business requirements related to InfoSec, access management, data privacy, and disaster recovery.</li><li>Prepare detailed Business Requirement Documents (BRD) and Functional Requirement Documents (FRD).</li><li>Identify and prioritize critical applications for disaster recovery site implementation to ensure business continuity during cyber incidents.</li><li>Conduct stakeholder workshops and meetings to ensure requirements are clearly defined and aligned.</li><li>Support implementation and testing of enterprise fraud management systems.</li><li>Analyze prerequisites for SailPoint application onboarding.</li><li>Maintain project documentation including change requests, progress updates, and outcome assessments.</li></ul>Qualifications &amp; Skills<ul><li>Proven experience with enterprise fraud management systems (e.g., SAS, Safer Payments).</li><li>Strong understanding of IT disaster recovery strategies and backup site implementation.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent communication and stakeholder management abilities.</li><li>Familiarity with data protection regulations (e.g., GDPR, CCPA).</li><li>Knowledge of Agile and Waterfall methodologies.</li><li>Certifications such as CBAP, CISA, CISM, CISSP are a plus.</li></ul>Application Question(s):<ul><li>How many years of experience do you have in Information Security (InfoSec) or IT Security?</li><li>Do you have hands-on experience with enterprise fraud management systems (e.g., SAS, Safer Payments)?</li><li>Have you worked on IT Disaster Recovery or backup site implementation projects?</li><li>Do you have experience in IT application access management (e.g., SailPoint onboarding)?</li><li>Are you familiar with data privacy regulations such as GDPR or CCPA?</li><li>Which project methodologies have you worked with? (Agile / Waterfall / Both)</li><li>Do you hold any relevant certifications (CBAP, CISA, CISM, CISSP)?</li><li>What is current salary? full package - QAR</li><li>What is your expected salary? full package QAR</li><li>What is your notice period?</li></ul>Work Location: In person

Senior Business Analyst – InfoSec & Fraud Management

Commercial Bank of Dubai

<div>Dubai, Dubai, AE Management Permanent ID: 100251</div>
 <div><div><div><div><h3 class="jobSectionHeader">DESCRIPTION</h3>
<div>Job Purpose:
The role is responsible for monitoring, analysing, and responding to security events and incidents to ensure timely detection and containment of threats. It ensures the effective implementation and continuous improvement of security controls aligned with regulatory requirements, industry standards, and organizational policies. The Senior IT Security Analyst supports vulnerability management, threat intelligence, and risk assessments to strengthen the overall security posture. The role collaborates closely with IT, business, and third‑party stakeholders to embed security best practices across systems, applications, and processes. It provides expert guidance during security investigations, audits, and regulatory inspections, ensuring accurate reporting and compliance. The position contributes to security architecture reviews, change management, and project initiatives to ensure security-by-design principles are applied.
Principal Accountabilities:<ul><li>
Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.</li><li>
Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.</li><li>
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.</li><li>
Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.</li><li>
Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.</li><li>
Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.</li><li>
Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.</li><li>
Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.</li><li>
Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.</li><li>
Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).</li><li>
Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).</li><li>
Support data protection and information classification initiatives, including security monitoring and incident handling.</li><li>
Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.</li><li>
Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.</li><li>
Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.</li><li>
Provide security guidance and awareness to IT and business teams to promote secure practices.</li></ul></div></div></div></div></div>
 <div><div><div><div><h3 class="jobSectionHeader">REQUIREMENTS</h3>
<div>Education and Experience<ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology, Information Systems, or related discipline.</li><li>
Equivalent professional experience may be considered in lieu of formal education where applicable.</li><li>
CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.</li><li>
Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.</li><li>
Minimum 5&ndash;8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.</li></ul></div></div></div></div></div>

Senior IT Security Analyst ( UAE National )

Aga Khan University

<div>
 
 
 Introduction to the Aga Khan University:
 
 
 
 
 
 
 Chartered in 1983, Aga Khan University (AKU) is a private, autonomous and self-governing international university with 13 teaching sites in 6 countries distributed across three continents. As an integral part of the Aga Khan Development Network, AKU provides higher education in several disciplines, carries out research pertinent to the countries in which it exists and has campuses, programmes and/or teaching hospitals in Afghanistan, Kenya, Pakistan, Tanzania, Uganda and the UK. As an international institution, AKU operates on the core principles of quality, relevance, impact and access; and AKU is a model of academic excellence and an agent of social change.
 
 
 
 
 
 As an equal opportunity employer, AKU believes in promoting a diverse and inclusive culture and is committed to adopt appropriate standards for safeguarding and promoting a respectful relationship with and between diverse workforce of its faculty, staff, trainees, volunteers, beneficiaries, wider communities, and other stakeholders with whom it works, including children and vulnerable adults and expects all employees/trainees and partners to share this commitment.
 
 
 
 
 
 
 Job Role / Responsibilities:
 
 
 
 As Analyst, Information Security you will be assisting in managing the Global Information Security and to protect AKU&rsquo;s enterprise infrastructure, digital information, and business continuity globally through strong and effective security practices. At Aga Khan University, as an Analyst, Information Security you will be responsible for:
 
 
 
 
 <ul>
 <li>
 assisting in preparation, assessment and enforcement of information security policies, standards, guidelines and procedures and Perform IS policy and procedures gap assessments against information security, regulatory requirements and governance standards, for example ISO27001.2013, COBIT, PCI-DSS etc.
 </li>
 <li>
 ensuring that information security policy and relevant procedures are updated, reviewed and approved by the management at the defined frequency and are in compliance with applicable privacy and identity theft laws and other regulations.
 </li>
 <li>
 performing technology and information security risk assessments.
 </li>
 <li>
 liaising with IT and internal/external audit teams during information systems audit and working as a central point of contact from IT to ensure appropriate flow of information to audit team with any delay.
 </li>
 <li>
 working with IT team for successful closure of the audit observations for all sites (Pakistan, East Africa, UK and Afghanistan).
 </li>
 <li>
 actively participating in the Security Incident Response Team (SIRT).
 </li>
 <li>
 performing internal assessments and identify gaps in current documentation and operations
 </li>
 <li>
 and working to fix these gaps.
 </li>
 <li>
 working with other teams in technology, internal audit and vendors to ensure that AKU-wide information security requirements are incorporated into the rollout of new systems.
 </li>
 <li>
 performing and maintaining information/ data classification policy and procedure and educating IT and business users and ensure all critical information assets are classified properly.
 </li>
 <li>
 performing vulnerability assessments on operating systems, databases, and applications.
 </li>
 <li>
 reviewing of audit logs for critical applications, databases, OS and networks.
 </li>
 <li>
 conducting information security awareness trainings for AKU staff globally.
 </li>
 <li>
 working with business functional leads and technology team leads to ensure that user access rights review and privileged access rights review will complete on time.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Eligibility Criteria / Requirements:
 
 
 <ul>
 <li>
 a bachelor&rsquo;s degree in computer science, Computer Engineering, Information Security, or
 </li>
 <li>
 related field.
 </li>
 <li>
 relevant certifications such as CISA, CISM, CEH, CISSP, or equivalent Experience.
 </li>
 <li>
 1 to 2 years of hands-on experience in Information Security covering risk assessments, policy development, security awareness, IT audits, and implementation of ISO 27001 and PCI-DSS.
 </li>
 <li>
 proven expertise in performing security assessments for infrastructure, systems, and networks, with a focus on identifying vulnerabilities or gaps.
 </li>
 <li>
 experience in incident response planning, investigation, and handling breaches, including navigating legal and disciplinary actions.
 </li>
 <li>
 strong knowledge of Information Security frameworks and standards, including ISO 27001, PCI-DSS, NIST, GDPR, and CIS.
 </li>
 <li>
 ability to conduct information security risk assessments and critical practice assessments, providing actionable insights and recommending improvements.
 </li>
 <li>
 ability to manage and drive remediation efforts following security incidents, penetration tests, vulnerability scans, and audit results.
 </li>
 <li>
 deep understanding of business activities, with the ability to tailor security solutions that address specific needs within the organization.
 </li>
 </ul>
 
 
 
 
 Comprehensive employment reference checks will be conducted
 
 
 
</div>

Analyst, Information Security

StandardAero

<div>Build an Aviation Career You&rsquo;re Proud Of
At StandardAero, we use our ingenuity and know-how to find solutions for the simple to the most complex challenges in aviation. Together, we get the job done and done well. Our stability, resources, and respectful culture supports you in building a solid career with a great team you can count on day in and day out for the long term.
Summary:
As an IT Security Analyst position is a critical role in protecting StandardAero&rsquo;s business and technology operations. In this role you will be accountable in securing the enterprise technology and operations against an ever evolving and growing threat landscape. The role is an integral position in supporting StandardAero&rsquo;s global cyber-security defenses, providing tactical cyber security objectives and implementing the security strategy across the organization.
What you&rsquo;ll do :
<ul><li>Conduct risk and security assessments, including vulnerability analysis, threat detection, and risk mitigation across enterprise systems.
</li><li>Support internal and external security audits, including remediation activities and compliance documentation.
</li><li>Investigate, analyze, and document security incidents, performing root cause analysis and coordinating incident response and forensic support.
</li><li>Monitor, analyze, and respond to security alerts across endpoints, networks, applications, and global IT environments.
</li><li>Design, implement, administer, and maintain cybersecurity technologies (e.g., Endpoint Protection, IDS/IPS, SIEM, MFA, DLP, Email/Web Security, NAC).
</li><li>Perform proactive threat hunting by correlating activity across systems, logs, and environments to identify anomalous or malicious behavior.
</li><li>Partner with IT Operations teams to remediate vulnerabilities and strengthen system security controls.
</li><li>Research emerging cybersecurity technologies and trends; recommend enhancements to security policies, processes, and tools.
</li><li>Develop and maintain security documentation, reports, and technical standards to support governance and operational needs.
</li>Manage multiple priorities and projects with strong analytical, communication, and organizational skills while working independently or collaboratively. 
<li>
</li></ul><div></div>Minimum Qualifications:
<ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field; equivalent experience may be considered.
</li><li>2+ years of progressive experience in cybersecurity
</li><li>3+ years of experience IT, including hands-on security operations, threat detection, or engineering.
</li>2+ years of experience of network and application security, threat actor tactics (MITRE ATT&amp;CK), and incident response frameworks. 
<li>
</li></ul>Preferred Qualifications:
<ul><li>IT Security Certification, specifically GSEC, CEH, CISSO, CISA or CISSP, GCIA, OSCP and ITIL
</li><li>SDLC, and understand application security.
</li><li>Containerization and Development Security Operations
</li>Experience working in regulated environments or with industry frameworks (e.g., NIST, ISO 27001, CIS, or CMMC). 
<li>
 </li></ul>Benefits that make life better:
<ul><li>Comprehensive Healthcare
</li><li>401(k) with 100% company match; up to 5% vested
</li><li>Paid Time Off starting on day one
</li><li>Bonus opportunities
</li><li>Health- &amp; Dependent Care Flexible Spending Accounts
</li><li>Short- &amp; Long-Term Disability
</li><li>Life &amp; AD&amp;D Insurance
</li>Learning &amp; Training opportunities 
<li>
</li></ul>Raising the Standard of Excellence since 1911
With over a century of proven excellence, StandardAero has become an industry leader in MRO services and customized solutions in the aerospace field. Our shared values and learning-based culture inspire our team to exceed their potential and power our customers&rsquo; missions worldwide. With on-the-job training, advancement opportunities, and excellent benefits, StandardAero invites you to experience a fulfilling and meaningful career with us.
Inclusivity Is Our Standard
It is StandardAero&rsquo;s policy to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. Our supportive environment celebrates diversity with no room for harassment or discrimination of any kind. We invite you to bring your authentic self to our team and experience our welcoming culture.</div>

Bank Alfalah Limited

<div>
 
 Job Purpose:
 
 
 The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 
 
 
 
 
 Responsibilities:
 
 <ul>
 <li>
 Support the execution of internal and external information security audits in collaboration with the Team lead.
 </li>
 <li>
 Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
 </li>
 <li>
 Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
 </li>
 <li>
 Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
 </li>
 <li>
 Maintain and oversee the information security risk register.
 </li>
 <li>
 Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
 </li>
 <li>
 Coordinate with IT/security teams for mitigation strategies.
 </li>
 <li>
 Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
 </li>
 <li>
 Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
 </li>
 <li>
 Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
 </li>
 <li>
 Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
 </li>
 <li>
 Oversee cyber security and information security (NESA Compliance) programs.
 </li>
 <li>
 Lead risk assessments and ensure compliance of vendors with security requirements
 </li>
 <li>
 Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
 </li>
 <li>
 Lead, and manage the IS GRC team in absence of Team Lead
 </li>
 <li>
 Manage risk acceptance process and ensure proper approval from the management
 </li>
 <li>
 Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
 </li>
 <li>
 Coordinate and manage regulatory inspections and ensure timely closure of observations
 </li>
 </ul>
 
 
</div>

Senior Manager Information Security

Search 10000+ Senior information security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 senior information security analyst jobs Near Me

Senior Information Security Analyst - Compliance & GRC

Senior Cybersecurity Analyst

Senior Business Analyst – InfoSec & Fraud Management

Senior IT Security Analyst ( UAE National )

Analyst, Information Security

Analyst, Information Security

Senior Manager Information Security