Information Security Specialist

As an Information Security Specialist in ZMI , you will be responsible in supporting the implementation, operation, and continuous improvement of the organization's information security program. This role provides operational support for cybersecurity technologies and processes, coordinates with the Security Operations Center (SOC) and ICT teams to address security events, maintains security documentation and compliance evidence, and supports the delivery of security awareness initiatives. The role requires a proactive and detail-oriented professional with practical experience in information security operations, strong analytical and problem-solving skills, and the ability to collaborate effectively with cross-functional stakeholders.

Key responsibilities

• Support day-to-day information security activities, including monitoring alerts, reviewing logs, and following up on security events with the SOC and internal ICT teams.
• Assist in vulnerability management activities, including tracking scan results, coordinating remediation with system owners, and maintaining remediation status updates.
• Support incident response activities by collecting initial information, escalating alerts, documenting actions taken, and assisting with post-incident follow-up.
• Assist in maintaining and monitoring security solutions such as endpoint protection, email security, DLP, SIEM, vulnerability scanners, firewalls, and access control tools.
• Perform periodic access reviews and support identity and access management activities in line with approved policies and procedures.
• Assist in preparing security reports, dashboards, and evidence for internal reviews, audits, compliance requirements, and management reporting.
• Support the implementation of information security policies, standards, baselines, and procedures across ICT systems and business processes.
• Contribute to security awareness activities by assisting with awareness communications, phishing campaign follow-up, and user guidance on secure practices.
• Maintain accurate security documentation, including registers, checklists, remediation trackers, incident records, and compliance evidence.
• Coordinate with infrastructure, systems, network, application, and business teams to ensure security requirements are understood and followed.

Minimum Requirements:

• UAE National with a Family Book is preferred
• Bachelor’s degree in Computer science, Information Security, or related field.
• Minimum of 2 years of practical experience in information security, cybersecurity operations, SOC support, vulnerability management, endpoint/email security, access control, or related ICT security functions
• Good understanding of information security principles, cybersecurity threats, risks, and enterprise security controls.
• Working knowledge of Security Operations Center (SOC) processes, security monitoring, log analysis, and incident escalation.

Preferred Qualifications:

• Relevant associate-level security certification is preferred, such as CompTIA Security+, Microsoft SC-900/SC-200 Fundamentals or Associate level, ISO 27001 Foundation, or equivalent practical cybersecurity training.

Required Skills:

• Familiarity with cybersecurity technologies such as EDR, SIEM, DLP, endpoint protection, email security, firewalls, MFA, and IAM.
• Understanding of secure configuration, system hardening, patch management, and access control best practices.
• Knowledge of information security frameworks and standards, including ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and data protection requirements.
• Ability to support cybersecurity incident response through event triage, evidence collection, documentation, escalation, and post-incident activities.
• Strong analytical, troubleshooting, problem-solving, and risk assessment skills with attention to detail.
• Ability to prepare accurate security reports, dashboards, audit evidence, remediation trackers, and compliance documentation.
• Effective communication, stakeholder coordination, and collaboration skills, with the ability to work across ICT teams and business functions.