Senior Security Assurance Specialist

Job Title: Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced and analytical Senior Security Assurance Specialist to evaluate information security controls, assess technology risks, support compliance initiatives, and strengthen the organization's overall security posture. The successful candidate will conduct security assessments, review control effectiveness, coordinate remediation activities, and provide assurance that security requirements are consistently implemented across systems, applications, and business processes.

The ideal candidate will have strong knowledge of information security governance, risk management, control testing, audit readiness, and security frameworks. This position is designed for fully remote work, with responsibilities performed through secure assessment platforms, digital evidence repositories, and virtual collaboration tools.

Key Responsibilities

• Security Assurance Framework: Develop, maintain, and improve security assurance methodologies, assessment procedures, control standards, and supporting documentation.
• Security Control Assessments: Evaluate the design and operating effectiveness of technical, administrative, and organizational security controls.
• Risk-Based Reviews: Conduct security assessments based on business risk, system criticality, data sensitivity, threat exposure, and regulatory requirements.
• Control Testing: Review evidence, perform control walkthroughs, assess implementation records, and document testing results against defined security requirements.
• Security Gap Analysis: Identify control deficiencies, policy deviations, process weaknesses, and gaps against established security standards.
• Remediation Management: Coordinate corrective actions with control owners, monitor remediation progress, validate supporting evidence, and escalate overdue findings.
• Security Governance: Support the implementation and maintenance of security policies, standards, procedures, and governance requirements.
• Framework Alignment: Assess controls against relevant frameworks and standards, such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and applicable UAE regulatory requirements.
• Third-Party Security Assurance: Review supplier security questionnaires, independent assurance reports, control attestations, and supporting evidence to assess vendor security risks.
• Cloud Security Assurance: Evaluate cloud security governance, identity controls, configuration management, logging, encryption, and other relevant safeguards using remote assessment methods.
• Application and Infrastructure Reviews: Assess security controls associated with enterprise applications, endpoints, networks, infrastructure, and business-critical systems.
• Audit Coordination: Prepare evidence packages, control matrices, assessment reports, and remediation records for internal audits, external audits, and regulatory reviews.
• Policy Compliance Monitoring: Monitor compliance with internal security policies, approved exceptions, control requirements, and risk acceptance procedures.
• Security Risk Register: Maintain accurate records of identified risks, control weaknesses, findings, action owners, and agreed remediation deadlines.
• Incident Assurance Support: Review post-incident findings and assess whether corrective actions adequately address identified control failures.
• Metrics and Reporting: Prepare management reports covering control effectiveness, assessment outcomes, risk exposure, remediation status, and recurring findings.
• Stakeholder Coordination: Work remotely with IT operations, cybersecurity, compliance, risk management, internal audit, application owners, and business stakeholders.
• Process Improvement: Identify opportunities to improve assessment consistency, evidence collection, control monitoring, and assurance reporting.
• Security Awareness: Provide guidance to control owners and relevant teams on security assurance expectations, evidence standards, and remediation responsibilities.
• Continuous Monitoring: Support ongoing assurance activities to identify changes in control effectiveness, emerging risks, and areas requiring additional review.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• At least 5–8 years of relevant experience in security assurance, information security governance, IT risk, security auditing, or cybersecurity compliance.
• Strong understanding of security control design, control testing, risk assessment, and evidence-based assurance practices.
• Experience assessing security controls across applications, infrastructure, cloud environments, identity management, and operational processes.
• Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, or comparable security frameworks.
• Knowledge of information security governance, risk registers, policy management, control exceptions, and remediation tracking.
• Experience supporting internal audits, external audits, regulatory assessments, or third-party security reviews.
• Understanding of cloud security principles, access management, vulnerability management, logging, encryption, and incident response controls.
• Ability to analyze technical and procedural evidence and translate findings into clear, actionable recommendations.
• Experience with governance, risk, and compliance (GRC) platforms or security assurance tools is an advantage.
• Proficiency in Microsoft Excel, Word, PowerPoint, and reporting tools used for assessment documentation and management reporting.
• Strong analytical, organizational, documentation, and problem-solving skills.
• Excellent written and verbal communication skills, including the ability to present security risks to technical and nontechnical stakeholders.
• Professional certifications such as CISA, CISSP, CRISC, ISO 27001 Lead Auditor, or equivalent credentials are advantageous.
• Ability to work independently from home and collaborate effectively with geographically distributed teams through secure digital platforms.

Key Performance Indicators (KPIs)

• Assessment Completion: Complete scheduled security assurance assessments within agreed timelines.
• Control Effectiveness: Improve the effectiveness and consistency of security controls across assessed environments.
• Remediation Timeliness: Reduce overdue security findings and ensure corrective actions are completed within agreed deadlines.
• Evidence Quality: Maintain accurate, complete, and traceable evidence supporting assessment conclusions.
• Audit Readiness: Support successful audits and regulatory reviews through timely evidence preparation and issue resolution.
• Risk Reduction: Contribute to measurable reductions in unresolved security risks and recurring control deficiencies.
• Third-Party Assurance: Complete assigned supplier security reviews and escalate material risks appropriately.
• Reporting Accuracy: Deliver clear, reliable, and timely assurance reports and management dashboards.
• Framework Compliance: Improve alignment with applicable security standards, internal policies, and regulatory requirements.
• Process Improvement: Reduce assessment inefficiencies and improve consistency through standardized procedures and automation.

What We Offer

• Competitive compensation based on qualifications and relevant experience.
• 100% remote working arrangement, with all responsibilities performed from home using secure digital systems.
• Opportunities to contribute to enterprise cybersecurity governance, risk management, and security assurance initiatives.
• Professional development opportunities in security auditing, risk management, compliance, and assurance frameworks.
• Exposure to enterprise technology environments and security control improvement programs.
• A collaborative, quality-focused environment that values integrity, analytical thinking, accountability, and continuous improvement.

How to Apply

Interested candidates should submit an updated CV highlighting their security assurance experience, control assessment expertise, framework knowledge, and achievements in security risk reduction or compliance improvement.

Applicants are encouraged to include examples of assessments completed, audit findings resolved, control weaknesses remediated, or improvements made to security assurance processes.

Email Subject Line: Application – Senior Security Assurance Specialist (UAE Remote)

We welcome applications from qualified professionals who demonstrate strong cybersecurity assurance expertise, sound risk judgment, and a commitment to strengthening information security controls across enterprise environments.

• Important: Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.