Senior Analyst, Information Security

About the role

M42, a global health champion powered by AI and genomics, seeks a Senior Analyst to develop, implement and maintain an enterprise‑wide Information Security Framework aligned with international standards and healthcare regulations.

Key responsibilities

• Design, implement and maintain security policies, standards and processes based on ISO 27001, ISO 27701, HIPAA and other relevant regulations.
• Conduct technology risk assessments, risk control self‑assessments (RCSA) and manage security incidents, including incident response planning and testing.
• Lead security projects, monitor security metrics (KRIs/KPIs), and report risk visibility to senior leadership.
• Coordinate with IT GRC, internal and external audit teams to address regulatory gaps and ensure compliance with ADHICS, GDPR, NESA and other mandates.

Required profile

• Bachelor’s or Master’s degree in IT, Computer Science or related field.
• 5‑10 years of information security experience, with at least 5 years in the healthcare sector.
• Proven track record in security governance, risk management, compliance and security operations.
• Strong stakeholder management and communication skills, able to engage senior leadership, auditors and regulators.

Required skills

• ISO 27001, ISO 27701, HIPAA, GDPR, ADHICS, NESA knowledge.
• Risk assessment, RCSA and security metrics development.
• Cloud security architectures (AWS, Azure) and related certifications.
• Industry certifications such as CISA, CISM, CISSP, CCSP, ITIL v4.