Cyber Security Compliance Specialist (UAE National)

About the role

This is a hands‑on technical security compliance role focused on verifying that systems, platforms and cloud services meet required security standards and hardening baselines. You'll identify configuration gaps, track vulnerabilities and patches through to verified closure, automate compliance checks and provide robust technical evidence for audits and assessments.

Key responsibilities

• Own technical compliance verification across systems, cloud services, networks and endpoints, validating configurations directly against security baselines and hardening standards.
• Drive vulnerability and patch remediation, tracking issues against agreed timelines and verifying that fixes have genuinely resolved the underlying exposure.
• Automate compliance monitoring, expanding automated checks and identifying configuration drift before it becomes a recurring security issue.
• Strengthen policy and regulatory compliance, assessing technical exceptions, recommending compensating controls and maintaining high‑quality evidence for audits and assessments.
• Partner with engineering and platform teams to embed compliance into configuration management, reducing reliance on repeated manual remediation.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related technical discipline.
• Minimum 4 years' experience within security compliance, systems administration or technical assurance, including hands‑on configuration verification.
• Strong experience with enterprise vulnerability management, patch remediation and security hardening, including knowledge of CIS benchmarks.
• Practical technical knowledge spanning operating systems, cloud services, network devices and endpoints, with scripting or query capabilities to gather evidence at scale.
• Exposure to UAE Information Assurance Standards, ISO/IEC 27001 or comparable security frameworks; certifications such as CISA, Security+ or cloud security would be advantageous.

Required skills

• Vulnerability management
• Patch remediation
• Security hardening
• CIS benchmarks
• Operating systems
• Cloud services
• Network devices
• Endpoints
• Scripting
• Query languages