senior it security analyst

Commercial Bank of Dubai

<div>Dubai, Dubai, AE Management Permanent ID: 100251</div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>DESCRIPTION</b></h3>
<div><p><b>Job Purpose:</b></p><p>
The role is responsible for monitoring, analysing, and responding to security events and incidents to ensure timely detection and containment of threats. It ensures the effective implementation and continuous improvement of security controls aligned with regulatory requirements, industry standards, and organizational policies. The Senior IT Security Analyst supports vulnerability management, threat intelligence, and risk assessments to strengthen the overall security posture. The role collaborates closely with IT, business, and third‑party stakeholders to embed security best practices across systems, applications, and processes. It provides expert guidance during security investigations, audits, and regulatory inspections, ensuring accurate reporting and compliance. The position contributes to security architecture reviews, change management, and project initiatives to ensure security-by-design principles are applied.</p><p><b>
Principal Accountabilities:</b></p><ul><li>
Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.</li><li>
Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.</li><li>
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.</li><li>
Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.</li><li>
Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.</li><li>
Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.</li><li>
Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.</li><li>
Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.</li><li>
Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.</li><li>
Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).</li><li>
Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).</li><li>
Support data protection and information classification initiatives, including security monitoring and incident handling.</li><li>
Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.</li><li>
Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.</li><li>
Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.</li><li>
Provide security guidance and awareness to IT and business teams to promote secure practices.</li></ul></div></div></div></div></div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>REQUIREMENTS</b></h3>
<div><p><b>Education and Experience</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology, Information Systems, or related discipline.</li><li>
Equivalent professional experience may be considered in lieu of formal education where applicable.</li><li>
CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.</li><li>
Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.</li><li>
Minimum 5&ndash;8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.</li></ul></div></div></div></div></div><p></p>

Senior IT Security Analyst ( UAE National )

Agility

<div>
 <p>
  <strong>
   Role Summary:
  </strong>
 </p>
 <p>
  We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 </p>
 <p>
  <strong>
   Your Responsibilities:
  </strong>
 </p>
 <p>
  &nbsp;Compliance and GRC Management
 </p>
 <ul>
  <li>
   &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
  </li>
 </ul>
 <ul>
  <li>
   Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
  </li>
  <li>
   Act as the primary auditee and point of contact for all internal and external information security audits
  </li>
  <li>
   Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
  </li>
  <li>
   Drive a culture of security and resilience across the organization
  </li>
 </ul>
 <p>
  &nbsp;Security Controls &amp; Technical Oversight
 </p>
 <ul>
  <li>
   &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
  </li>
 </ul>
 <ul>
  <li>
   Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
  </li>
  <li>
   Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
  </li>
  <li>
   Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
  </li>
  <li>
   Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <p>
  <strong>
   Your Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
  </li>
 </ul>
 <ul>
  <li>
   Experience: A minimum of 5 - 10 years of experience in a similar environment
  </li>
  <li>
   Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
  </li>
  <li>
   Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
  </li>
  <li>
   Language: Must be fluent in English, with Arabic as an added advantage.
   <br/>
  </li>
 </ul>
 <p>
  <strong>
   Your Competencies:
  </strong>
 </p>
 <p>
  Technical:
 </p>
 <ul>
  <li>
   Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
  </li>
  <li>
   Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
  </li>
  <li>
   Tools: Practical experience with Vulnerability and Risk Assessment Tools  and familiarity with SIEM platforms
  </li>
  <li>
   Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
  </li>
 </ul>
 <p>
  &nbsp;Behavioral:
 </p>
 <ul>
  <li>
   Teamwork and Collaboration
  </li>
  <li>
   Quality and Results focused
  </li>
  <li>
   Learning Agility
  </li>
  <li>
   Business Acumen
  </li>
  <li>
   Decision Making
  </li>
  <li>
   Digital Savvy
  </li>
  <li>
   Agility and Adaptability
  </li>
  <li>
   Negotiation and influence
  </li>
  <li>
   Planning and Organizing
  </li>
 </ul>
</div>


Senior Information Security Analyst - Compliance & GRC

Arrow Components

<div>
 <strong>
  Position
  <br/>
  <br/>
 </strong>
 Senior IT Security Compliance Engineer
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization&rsquo;s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
 <br/>
 <br/>
 Key Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.
  </li>
  <li>
   Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.
  </li>
  <li>
   Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.
  </li>
  <li>
   Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.
  </li>
  <li>
   Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.
  </li>
  <li>
   Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.
  </li>
  <li>
   Prepare and deliver security metrics, compliance reports, and executive-level summaries.
  </li>
  <li>
   Provide security awareness, training, and education to employees to promote a strong security culture across the organization.
  </li>
  <li>
   Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements And Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.
  </li>
  <li>
   Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.
  </li>
  <li>
   GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.
  </li>
  <li>
   Experience working in SaaS or technology-driven environments is highly desirable.
  </li>
  <li>
   Familiarity with cloud computing platforms and cloud security principles.
  </li>
  <li>
   Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.
  </li>
  <li>
   Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Engineering, Computer Science, Information Security, or a related field.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Location:
  <br/>
  <br/>
 </strong>
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 <br/>
 <br/>
 <strong>
  Time Type
  <br/>
  <br/>
 </strong>
 Full time
 <br/>
 <br/>
 <strong>
  Job Category
  <br/>
  <br/>
 </strong>
 Information Technology
</div>


Senior IT Security Compliance Engineer

Arrow Electronics

<b>Position:</b><br>
Senior IT Security Compliance Engineer
<br><br>
<b>Job Description:</b><br>
The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization’s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
<br><br>
Key Responsibilities
<br><br>
<ul>
<li>Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.</li>
<li>Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.</li>
<li>Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.</li>
<li>Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.</li>
<li>Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.</li>
<li>Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.</li>
<li>Prepare and deliver security metrics, compliance reports, and executive-level summaries.</li>
<li>Provide security awareness, training, and education to employees to promote a strong security culture across the organization.</li>
<li>Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.</li>
</ul>
Requirements and Qualifications
<br><br>
<ul>
<li>Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.</li>
<li>Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.</li>
<li>GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.</li>
<li>Experience working in SaaS or technology-driven environments is highly desirable.</li>
<li>Familiarity with cloud computing platforms and cloud security principles.</li>
<li>Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.</li>
<li>Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.</li>
<li>Bachelor’s degree in Computer Engineering, Computer Science, Information Security, or a related field.</li>
</ul>
<b>Location:</b><br>
EG-Cairo, Egypt (Al Emdad Al Tamween)
<br><br>
<b>Time Type:</b><br>
Full time
<br><br>
<b>Job Category:</b><br>
Information Technology

Infinite pl

<div><div><p><b>Infinite pl </b>is a digital-led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We are enabled through in-house, external, network, and investment capabilities that we utilize to orchestrate and build innovative platforms tackling complex problems within logistics and adjacent sectors.</p>
<p><b>
Infinite pl&rsquo;s mission</b> is nothing short of a logistics revolution! We're here to enrich the experiences of governments, businesses, and residents around the world through cutting-edge digital solutions.</p>
<p><b>
We're not just players; we're game-changers.</b></p>
</div>
<h3 class="jobSectionHeader"><b>Role Summary:</b></h3><div>
The <b>Senior IT Security Specialist </b>supports IT security operations by ensuring effective implementation of security controls across IT systems, infrastructure, and services.</div><h3 class="jobSectionHeader"><b>
Key Responsibilities:</b></h3><ul><li>Implement IT security operational controls across systems and applications</li><li>Support access management and privileged account governance</li><li>Conduct operational security reviews and compliance checks</li><li>Support resolution of IT security operational issues and incidents</li><li>Monitor system security configurations and identify gaps</li><li>Assist in vulnerability remediation from an IT operations perspective</li><li>Support IT audits and compliance activities</li><li>Work closely with infrastructure and application teams to enforce standards</li></ul><h3 class="jobSectionHeader"><b>
Key Requirements:</b></h3><ul><li>Strong experience in IT operations and system security controls</li><li>Good understanding of IT infrastructure, cloud, and enterprise systems</li><li>Knowledge of ITIL processes and access governance</li><li>Experience in supporting IT audits and compliance requirements</li><li>Relevant certifications (ITIL, Security+, or equivalent preferred)</li></ul><div>
Infinite pl ️ - where innovation meets logistics, and the journey is Infinitely boundless!<br>
Let's disrupt logistics together and explore infinite opportunities!</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior IT Security Specialist

Versatech, Inc.

<div><div><b>Company Description</b></div>
<div>VersaTech is an ISO-certified provider of innovative technology solutions to the public sector, providing services that include Digital Transformation, IT Infrastructure Support, Cyber Security, Agile Software Development, Audio Visual Solutions, and Healthcare Consulting. Our long record of customer satisfaction and commitment to excellence provides assurance to our clients that we have the talent, management, and innovation necessary to solve their problems and exceed expectations.</div>
<div></div><div><b>Job Description</b></div>
<div>We are seeking a <b>Senior IT Asset Management Specialist</b> to support our client, the University of Maryland Global Campus (UMGC), in the Washington, DC Metro Area.</div>
<div></div><div><b>Salary: </b>W-2: $65,000 &ndash; $70,000</div>
<div></div><div><b>Location: </b>Hybrid &ndash; 2 days onsite per week. Onsite location: UMGC, College Park/Adelphi, MD.</div>
<div></div><div><div><b>Job Summary</b></div>
<div>The Senior IT Asset Management (ITAM) Specialist is a key technical and strategic role responsible for overseeing the full lifecycle of IT assets (hardware, software, cloud services, and licenses) across the organization. This position ensures optimal utilization, cost efficiency, compliance with regulatory and vendor requirements, and alignment of IT assets with business objectives. The Senior Specialist provides leadership in process improvement, vendor negotiations, risk mitigation, and cross-functional collaboration while mentoring junior team members and driving ITAM maturity.</div>
<div></div><div><b>Key Responsibilities</b></div>
<ul><li>Lead the end-to-end IT asset lifecycle management: procurement, deployment, maintenance, optimization, and retirement/disposal of hardware, software, SaaS, PaaS, IaaS, and licensing.</li>
<li>Maintain accurate and comprehensive asset inventories using CMDB, ITAM tools, and discovery solutions; ensure data integrity and reconciliation processes.</li>
<li>Manage software license compliance, entitlements, true-ups, and audits; minimize over/under-licensing and associated financial risks.</li>
<li>Analyze asset utilization, costs, and trends; provide recommendations for cost optimization, consolidation, and strategic sourcing.</li>
<li>Collaborate with Procurement, Finance, Legal, Security, and IT Operations teams on contracts, budgeting, TCO analysis, and vendor management.</li>
<li>Conduct regular audits, risk assessments, and compliance reporting for internal controls, SOX, GDPR, or other regulatory requirements.</li>
<li>Evaluate, implement, and optimize ITAM tools and automation (e.g., ServiceNow HAM Pro, ServiceNow SAM Pro, Microsoft SCCM/Intune, or similar tools)</li>
</ul></div><div><div><b>Required Qualifications</b></div>
</div><ul><li>Bachelor&rsquo;s degree in Computer Science or Information Technology, or equivalent work experience.</li>
<li>5+ years of proven experience with major IT Asset Management platforms and discovery tools.</li>
<li>Demonstrated success managing large-scale software licensing programs and vendor audits (Microsoft, Oracle, Adobe, SAP, etc.).</li>
</ul>
<div></div><div><div><b>Preferred Qualifications</b></div>
</div><ul><li>Experience with cloud asset management (AWS, Azure, Google Cloud) and hybrid environments.</li>
<li>ITIL Foundation certification.</li>
<li>Certified Software Asset Manager (CSAM).</li>
<li>IAITAM certifications (CHAMP, CSAM, etc.).</li>
</ul>
<div></div><div><div><b>Key Skills and Competencies</b></div>
</div><ul><li>Advanced analytical and critical thinking skills with strong attention to detail.</li>
<li>Excellent negotiation, communication, and stakeholder management abilities.</li>
<li>Deep understanding of licensing models, contracts, and financial aspects of IT assets.</li>
<li>Ability to work independently, prioritize effectively, and manage multiple projects in a fast-paced environment.</li>
<li>Strong project management and IT change management skills.</li>
<li>Familiarity with ITIL processes and ServiceNow modules such as ITSM, ITAM, HAM/SAM Pro, and CMDB.</li>
<li>Experience with Agile methodologies and version control.</li>
<li>Excellent problem-solving and effective communication skills.</li>
<li>Strong stakeholder collaboration and cross-functional partnership abilities.</li>
</ul>
<div></div><div>Find out who we are: https://www.versatechinc.com/</div>
<div></div><div>VersaTech offers an excellent benefits package that includes 401k employer-matching retirement contributions, generous paid time off (3 weeks PTO plus 11 holidays), and ample growth opportunities. VersaTech, Inc. is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.</div></div>

Senior IT Asset Management Specialist

Velocity Network, Inc.

<div>Description:
<p>
 Velocity Network, Northwest Pennsylvania&rsquo;s leading technology services firm, is currently searching for a Security and IT Specialist to join our growing team.</p><p>
The Security and IT Specialist plays a critical role in analyzing, assessing, and addressing security incidents and vulnerabilities. This role involves implementing and managing security solutions, conducting security monitoring and analysis, and ensuring compliance with security policies and procedures. The qualified candidate will have a strong technical background in IT security, hands-on experience with security tools and technologies, and the ability to recommend and implement effective security measures.</p><p>
The responsibilities of the position include:</p><ul><li>
Analyze and assess damage to the data/infrastructure due to security incidents, examine available recovery tools and processes, and recommend solutions.</li><li>
Analyze and assess vulnerabilities, research available tools and countermeasures to remedy the detected vulnerabilities, and recommend solutions and best practices.</li><li>
Audit security product deployment to ensure full deployment.</li><li>
Implement and manage security solutions.</li><li>
Perform security monitoring, security and data/logs analysis, and forensic analysis to detect security incidents and initiate an incident response.</li><li>
Investigate and utilize new technologies and processes to enhance security capabilities and implement improvements.</li><li>
Test for compliance with security policies and procedures.</li></ul><p>
 A bachelor's degree in Cybersecurity, Computer and Information Technology or related field with 1-2 years of previous information security experience and at least one security certification required.</p><p>
VNET offers a comprehensive compensation and benefits package including:</p><ul><li>
Competitive Pay</li><li>
Health Insurance</li><li>
Dental Insurance</li><li>
Vision Insurance</li><li>
Flexible Spending Accounts/Section 125 Plan</li><li>
401(k) Savings Plan with a company match</li><li>
Life Insurance</li><li>
Short Term Disability Insurance</li><li>
Paid Time Off</li><li>
Sick Time</li><li>
Paid Holidays</li><li>
Employee Assistance Program</li><li>
On-Site Fitness Facility</li><li>
Free Parking</li></ul><p>
If you&rsquo;re looking for a challenging career that will allow you to showcase your talents, skills, and expertise, a position at VNET could be a great fit.</p>
Requirements:
<ul><li>A bachelor's degree in Cybersecurity, Computer and Information Technology or related field.</li></ul></div>

Security and IT Associate

Search 10000+ Senior it security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 senior it security analyst jobs Near Me

Senior IT Security Analyst ( UAE National )

Senior Information Security Analyst - Compliance & GRC

Senior IT Security Compliance Engineer

Senior IT Security Compliance Engineer

Senior IT Security Specialist

Senior IT Asset Management Specialist

Security and IT Associate