Senior Records Security Specialist

Job Title: Senior Records Security Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Records Security Specialist to oversee the protection, confidentiality, integrity, availability, and controlled management of organizational records and information assets. The role focuses on records security governance, access control, information classification, retention requirements, secure document handling, audit readiness, and risk mitigation. Working remotely, the specialist will collaborate with information security, records management, legal, compliance, IT, and business teams to strengthen records protection practices and ensure that sensitive information is managed in accordance with applicable policies and regulatory requirements.

Key Responsibilities

• Develop, maintain, and improve records security policies, procedures, standards, and operational controls.
• Establish and monitor information classification requirements for confidential, restricted, sensitive, and business-critical records.
• Review access permissions for electronic records repositories, document management platforms, archives, and shared information systems.
• Support role-based access control, least-privilege principles, segregation of duties, and periodic access recertification.
• Monitor records security risks involving unauthorized access, disclosure, alteration, deletion, loss, or improper retention.
• Coordinate with IT and cybersecurity teams to strengthen encryption, authentication, logging, backup, and secure file-sharing controls.
• Review records management workflows to ensure secure creation, receipt, classification, storage, retrieval, transfer, and disposal of information.
• Support the implementation of retention schedules, legal holds, archival requirements, and secure destruction procedures.
• Assess third-party records management providers and cloud-based document platforms against applicable security and confidentiality requirements.
• Investigate reported records security incidents by coordinating evidence collection, access-log reviews, and incident documentation.
• Prepare incident summaries, risk assessments, remediation recommendations, and management reports.
• Coordinate with legal and compliance teams on document preservation requirements, regulatory requests, and information disclosure controls.
• Support internal audits, external assessments, and regulatory reviews involving records security and information governance.
• Monitor compliance with data protection, confidentiality, records retention, and information security policies.
• Conduct periodic reviews of records repositories to identify outdated access rights, duplicate records, insecure storage practices, and control weaknesses.
• Develop security awareness materials and provide remote guidance to employees on secure records handling and information protection.
• Maintain accurate records of access reviews, control assessments, incidents, exceptions, and remediation activities.
• Recommend improvements to document management systems, workflow automation, records classification, and security monitoring.
• Track emerging records security risks, regulatory developments, and industry practices relevant to information governance.

Qualifications and Experience

• Bachelor's degree in Information Security, Information Technology, Records Management, Information Governance, Business Administration, or a related discipline.
• Significant experience in records security, information governance, document management, data protection, or information security operations.
• Strong understanding of records lifecycle management, information classification, retention schedules, archival controls, and secure disposal.
• Experience administering or reviewing access controls for electronic document management systems and enterprise content management platforms.
• Knowledge of identity and access management, role-based permissions, encryption, audit logging, and secure information sharing.
• Familiarity with data protection and privacy requirements applicable in the UAE and relevant international frameworks.
• Understanding of information security standards and control frameworks such as ISO/IEC 27001 and related governance practices.
• Experience supporting security audits, records compliance assessments, incident reviews, and remediation activities.
• Ability to assess records security risks and translate findings into practical control improvements.
• Strong documentation, analytical, and problem-solving skills.
• Excellent communication skills and the ability to coordinate with technical and non-technical stakeholders.
• High standards of confidentiality, integrity, accuracy, and professional judgment.
• Ability to manage multiple priorities independently in a fully remote working environment.
• Relevant certifications such as ISO 27001, Certified Information Privacy Professional (CIPP), Certified Records Manager (CRM), or equivalent qualifications are an advantage.

What We Offer

• A fully remote, work-from-home position based in the UAE.
• The opportunity to strengthen enterprise information governance and records protection practices.
• Exposure to document management technologies, information security controls, and regulatory compliance initiatives.
• Collaboration with information security, IT, legal, compliance, and records management professionals.
• Opportunities for professional development in records security and information governance.

How to Apply

Interested candidates should submit an updated CV highlighting their records security experience, information governance expertise, access control knowledge, and relevant professional certifications.

Application Subject: Application – Senior Records Security Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, UAE residency requirements, and work authorization before accepting an offer.

• Role Scope: This is a remote records security governance, assessment, and coordination position. Physical archive handling, secure destruction of physical records, on-site security inspections, and other activities requiring physical presence must be performed by qualified local personnel. Legal hold decisions, formal regulatory disclosures, statutory records certifications, and other legally or formally authorized actions must be approved or executed by appropriately authorized personnel.