Cyber Security Compliance Specialist (UAE National)

About the role

This is a hands‑on technical security compliance role focused on verifying that systems, platforms and cloud services meet required security standards and hardening baselines. You will identify configuration gaps, track vulnerabilities and patches through to verified closure, automate compliance checks and provide robust technical evidence for audits and assessments.

Key responsibilities

• Own technical compliance verification across systems, cloud services, networks and endpoints, validating configurations against security baselines and hardening standards.
• Drive vulnerability and patch remediation, tracking issues against agreed timelines and confirming that fixes truly resolve the underlying exposure.
• Automate compliance monitoring, expand automated checks and detect configuration drift before it becomes a recurring security issue.
• Strengthen policy and regulatory compliance by assessing technical exceptions, recommending compensating controls and maintaining high‑quality audit evidence.
• Partner with engineering and platform teams to embed compliance into configuration management, reducing reliance on manual remediation.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related technical discipline.
• Minimum 4 years' experience in security compliance, systems administration or technical assurance, including hands‑on configuration verification.
• Strong experience with enterprise vulnerability management, patch remediation and security hardening, especially knowledge of CIS benchmarks.
• Practical knowledge of operating systems, cloud services, network devices and endpoints, with scripting or query capabilities to gather evidence at scale.
• Familiarity with UAE Information Assurance Standards, ISO/IEC 27001 or comparable frameworks; certifications such as CISA, Security+ or cloud/platform security are advantageous.

Required skills

• CIS benchmarks
• Vulnerability management
• Patch remediation
• Security hardening
• Operating systems
• Cloud services
• Network devices
• Endpoints
• Scripting / query languages
• UAE Information Assurance Standards
• ISO/IEC 27001
• CISA
• Security+