Senior Analyst – Information Security

About the role

M42 Health is seeking a Senior Analyst to lead the design, implementation and maintenance of its enterprise-wide Information Security Framework. The role ensures compliance with international standards and UAE healthcare regulations while protecting critical data assets.

Key responsibilities

• Develop, implement and maintain an Information Security Framework aligned with ISO 27001, ISO 27701, HIPAA and local regulations such as ADHICS, ADGM and GDPR.
• Conduct technology risk assessments, Risk Control Self‑Assessments (RCSA) and produce security metrics (KRIs, KPIs) for senior management.
• Lead security projects, manage incident response, and coordinate audit remediation with internal and external auditors.
• Oversee cloud security controls, supervise internal teams and external providers, and ensure regulatory submissions are accurate and timely.

Required profile

• Bachelor’s or Master’s degree in IT, Computer Science or related field.
• 5‑10 years of information security experience, with at least 5 years in the healthcare sector.
• Proven track record in security governance, risk management, compliance and security operations.
• Strong stakeholder management and communication skills, able to engage senior leadership, auditors and regulators.

Required skills

• ISO 27001, ISO 27701, HIPAA, ADHICS, GDPR, HITRUST knowledge.
• Risk assessment methodologies and RCSA execution.
• Cloud security architectures (AWS, Azure) and related certifications.
• Professional certifications: CISA, CISM, CISSP, CCSP (or equivalent).
• ITIL v4 (preferred).