Information Security Specialist

About the role

The Information Security Specialist will support ZMI’s information security program by operating and improving cybersecurity technologies, coordinating with the Security Operations Center (SOC) and ICT teams, and maintaining security documentation and compliance evidence. The role demands a proactive, detail‑oriented professional with hands‑on experience in security operations.

Key responsibilities

• Monitor alerts, review logs, and follow up on security events with the SOC and internal ICT teams.
• Track vulnerability scan results, coordinate remediation with system owners, and keep remediation status up to date.
• Assist incident response by gathering initial data, escalating alerts, documenting actions, and supporting post‑incident activities.
• Maintain and monitor security solutions such as endpoint protection, email security, DLP, SIEM, vulnerability scanners, firewalls, and access‑control tools.
• Perform periodic access reviews and support identity and access management in line with policies.
• Prepare security reports, dashboards, and audit evidence for internal and external reviews.
• Support implementation of security policies, standards, baselines, and procedures across ICT systems.
• Contribute to security awareness initiatives, including communications, phishing campaign follow‑up, and user guidance.
• Keep security registers, checklists, remediation trackers, incident records, and compliance evidence current.
• Collaborate with infrastructure, system, network, application, and business teams to ensure security requirements are understood and applied.

Required profile

• UAE National with a Family Book preferred.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum 2 years of practical experience in information security, SOC support, vulnerability management, endpoint/email security, or related ICT security functions.
• Good understanding of information security principles, cyber threats, risks, and enterprise security controls.
• Working knowledge of SOC processes, security monitoring, log analysis, and incident escalation.
• Relevant associate‑level security certification (e.g., CompTIA Security+, Microsoft) preferred.

Required skills

• Endpoint protection
• Email security
• Data Loss Prevention (DLP)
• Security Information and Event Management (SIEM)
• Vulnerability scanning tools
• Firewalls
• Access‑control tools
• Log analysis
• SOC processes
• Vulnerability management
• Incident response
• Identity and Access Management (IAM)
• Security monitoring
• Security documentation and policy implementation