Information Security Administrator / Officer

About the role

Metito Utilities is seeking an experienced Information Security Administrator / Officer to join its IT Security team. Reporting to the Senior Manager – IT, you will protect the organisation’s systems, data and information assets while enhancing overall security resilience.

Key responsibilities

• Lead and coordinate responses to cybersecurity incidents.
• Maintain incident response plans and security playbooks.
• Manage security awareness programmes and phishing simulations.
• Coordinate vulnerability assessments, penetration testing and remediation.
• Support ISO 27001 ISMS implementation and continual improvement.
• Assess security risks linked to technology and business changes.
• Monitor email and web security controls, investigate threats, and manage DMARC, DKIM and SPF configurations.
• Administer PKI, certificate lifecycle, MDM/MAM platforms, and mobile‑device compliance.
• Administer digital rights management controls.
• Support internal and external security audits and track findings to closure.
• Maintain security documentation, risk registers and management reports.

Required profile

• Bachelor’s degree in Information Security, Computer Science, IT or related field, or equivalent experience.
• 5–9 years of progressive information security experience.
• Hands‑on experience with email security, endpoint protection, PKI and MDM/MAM platforms.
• Experience supporting or leading ISO 27001 or comparable ISMS programmes.
• Strong understanding of ISO 27001, NIST Cybersecurity Framework, GDPR and UAE PDPL.
• CompTIA Security+ certification required; CISSP or CISM preferred; ISO 27001 Lead Implementer/Auditor, CEH, OSCP or GSEC advantageous.

Required skills

• Email security
• Endpoint protection
• PKI and certificate lifecycle management
• MDM/MAM platforms
• ISO 27001 implementation
• NIST Cybersecurity Framework
• GDPR and UAE PDPL compliance
• SIEM and log‑management tools
• Vulnerability scanners
• Web security gateways
• Web Application Firewalls
• DMARC, DKIM, SPF configuration
• Digital rights management controls