Senior Records Security Specialist

Job Title: Senior Records Security Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Records Security Specialist to protect the confidentiality, integrity, availability, and traceability of organizational records throughout their lifecycle. The role focuses on records access governance, information classification, secure document management, retention controls, data protection, audit readiness, and records security risk assessment. The successful candidate will collaborate with information security, legal, compliance, IT, records management, and business teams to ensure that sensitive records are appropriately protected and managed in accordance with organizational policies and applicable regulatory requirements.

Key Responsibilities

• Develop, maintain, and improve records security policies, standards, procedures, and control frameworks.
• Establish and monitor security requirements for the creation, classification, storage, access, transmission, retention, and disposal of organizational records.
• Review records management platforms, document repositories, electronic archives, and enterprise content management systems for security and access control effectiveness.
• Define and maintain information classification categories, handling requirements, and records sensitivity labels.
• Conduct periodic reviews of user permissions and access rights to ensure that records are accessible only to authorized personnel.
• Monitor access logs, document activity records, audit trails, and security events to identify unauthorized access or suspicious records activity.
• Assess risks associated with confidential, restricted, personal, financial, legal, and business-critical records.
• Coordinate with IT and cybersecurity teams to strengthen encryption, authentication, backup, recovery, and secure information transfer controls.
• Review records retention schedules and ensure security requirements are incorporated into archival and disposal procedures.
• Monitor compliance with data protection requirements, internal records policies, and applicable information governance standards.
• Investigate reported records security incidents, unauthorized disclosures, inappropriate access, and document handling exceptions.
• Maintain incident records, investigation evidence, remediation plans, and lessons-learned documentation.
• Support the implementation of secure electronic records management systems and automated document governance workflows.
• Review third-party records storage and document processing arrangements to identify information security risks.
• Coordinate security assessments of document management applications, cloud repositories, and records storage services.
• Support legal hold and records preservation processes by coordinating secure access, retention controls, and audit evidence with authorized legal teams.
• Prepare records security risk assessments, control effectiveness reports, access review summaries, and management dashboards.
• Coordinate internal and external audits by providing records security policies, access evidence, control documentation, and remediation updates.
• Recommend improvements to reduce unauthorized access, excessive permissions, information leakage, and records management vulnerabilities.
• Deliver awareness guidance on secure document handling, records classification, access responsibilities, and information protection practices.

Qualifications and Experience

• Bachelor's degree in Information Security, Cybersecurity, Information Management, Records Management, Computer Science, or a related discipline.
• Typically 5–8 years of experience in records security, information governance, information protection, data security, or document management controls.
• Strong understanding of information lifecycle management, records classification, retention, archival controls, and secure disposal principles.
• Experience managing or reviewing access controls for enterprise document management and records repositories.
• Knowledge of identity and access management, role-based access control, privileged access, and user access certification.
• Familiarity with enterprise content management and records management platforms such as Microsoft SharePoint, OpenText, IBM FileNet, or equivalent systems.
• Understanding of encryption, data loss prevention, secure file transfer, backup controls, and audit logging.
• Knowledge of information security and governance frameworks such as ISO 27001, ISO 15489, NIST, and relevant data protection principles.
• Experience conducting records security assessments, access reviews, control testing, and incident investigations.
• Understanding of retention schedules, legal holds, records preservation, and defensible information disposal practices.
• Familiarity with cloud security, electronic archiving, document workflow automation, and information governance technologies.
• Strong analytical and problem-solving skills, with the ability to identify records security risks and recommend effective controls.
• Excellent documentation, reporting, and stakeholder communication abilities.
• High standards of confidentiality, integrity, and attention to detail.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, CIP, or records and information management qualifications are advantageous.

What We Offer

• 100% remote working arrangement from within the United Arab Emirates, subject to applicable employment and work authorization requirements.
• Competitive compensation aligned with qualifications and professional experience.
• Opportunities to contribute to enterprise information governance and cybersecurity initiatives.
• Collaborative working environment with information security, legal, compliance, and technology professionals.
• Professional development and opportunities for career progression.

How to Apply

Interested candidates should submit an updated CV highlighting their records security experience, document management platforms, information governance expertise, access control capabilities, and relevant professional certifications.

Application Subject: Application – Senior Records Security Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.

• Remote-work scope and authorization: This is a fully remote records security governance role involving digital document reviews, access control assessments, records classification, policy development, incident analysis, and compliance reporting. Physical archive handling, paper record storage, secure shredding, on-site facility inspections, and physical media disposal must be performed by qualified local personnel or approved service providers. Legal hold determinations, authorization to disclose protected records, statutory retention exceptions, formal records destruction approvals, regulatory notifications, and legally binding compliance certifications must be made or approved by appropriately authorized legal, compliance, privacy, or records governance professionals.