Senior Security Assurance Specialist

Job Title: Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Security Assurance Specialist to evaluate information security controls, assess technology risks, and strengthen organizational security assurance practices. This fully remote position focuses on security control assessments, compliance reviews, risk analysis, third-party security evaluations, and audit readiness across enterprise IT environments. The successful candidate will collaborate with cybersecurity, IT operations, risk management, compliance, and business teams to identify security weaknesses, evaluate control effectiveness, and support continuous improvement of the organization's security posture.

Key Responsibilities

• Develop and execute security assurance plans, assessment frameworks, and control review procedures.
• Evaluate the design and operating effectiveness of information security controls across IT systems, applications, networks, and cloud environments.
• Conduct remote security control assessments against organizational policies, contractual requirements, and recognized industry standards.
• Review security policies, procedures, technical standards, risk registers, and supporting governance documentation.
• Assess compliance with frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, COBIT, and applicable UAE regulatory requirements.
• Perform security risk assessments and identify gaps in access management, data protection, vulnerability management, incident response, and infrastructure security.
• Review vulnerability assessment reports, penetration testing findings, remediation evidence, and security configuration documentation.
• Evaluate third-party and supplier security controls through questionnaires, evidence reviews, and structured assurance assessments.
• Assess cloud security governance, identity controls, encryption practices, backup arrangements, and operational resilience documentation.
• Identify control deficiencies, assess their potential business impact, and recommend proportionate remediation measures.
• Maintain security assurance workpapers, evidence registers, assessment records, and issue tracking documentation.
• Prepare detailed security assessment reports, executive summaries, and remediation recommendations.
• Coordinate with control owners and technical teams to monitor corrective actions and verify submitted remediation evidence.
• Support internal audits, external audits, customer security reviews, and regulatory examination preparation.
• Review security exceptions, compensating controls, and risk acceptance documentation for completeness and consistency.
• Monitor emerging cybersecurity threats, regulatory developments, and industry practices relevant to security assurance.
• Develop key risk indicators, control performance metrics, and security assurance dashboards.
• Recommend improvements to security governance processes, control testing methodologies, and assurance reporting.
• Facilitate remote workshops and stakeholder discussions to clarify control requirements and assessment findings.
• Promote a culture of security accountability, evidence-based risk management, and continuous control improvement.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Significant experience in information security assurance, IT risk management, cybersecurity governance, or technology audit.
• Strong understanding of information security principles, control frameworks, risk assessment methodologies, and security governance.
• Experience assessing technical and organizational controls across enterprise infrastructure, applications, and cloud platforms.
• Knowledge of ISO 27001, NIST, CIS Controls, COBIT, and relevant UAE information security requirements.
• Familiarity with vulnerability management, penetration testing reports, access governance, incident response, and data protection controls.
• Experience conducting third-party security assessments and reviewing supplier assurance documentation.
• Understanding of cloud security principles across platforms such as AWS, Microsoft Azure, and Google Cloud.
• Proficiency in security governance, risk, and compliance (GRC) platforms, audit management systems, and reporting tools.
• Strong analytical skills and ability to translate technical findings into clear business risk assessments.
• Excellent technical report-writing, documentation, and stakeholder communication abilities.
• High attention to detail, professional integrity, and sound risk judgment.
• Ability to manage multiple assessments, evidence requests, and remediation activities independently.
• Relevant certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent are advantageous.
• Comfortable coordinating with geographically distributed teams through secure digital collaboration platforms.

What We Offer

• A fully remote, work-from-home position based in the UAE.
• Competitive compensation aligned with qualifications and professional experience.
• Opportunities to contribute to enterprise cybersecurity governance and risk reduction.
• Exposure to diverse technology environments, security frameworks, and assurance programs.
• Professional development opportunities in information security, IT governance, and risk management.

How to Apply

Interested candidates should submit an updated CV highlighting their security assurance experience, cybersecurity knowledge, risk assessment capabilities, and relevant professional certifications.

Application Subject: Application – Senior Security Assurance Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.

• Professional Scope: This position focuses on remote security assurance, documentation review, control testing based on approved evidence, risk analysis, and remediation verification. Physical security inspections, on-site infrastructure testing, penetration testing execution, production system changes, and live incident response must be performed by appropriately qualified and authorized personnel. Formal regulatory attestations, risk acceptances, and statutory compliance sign-offs must be completed by designated authorized representatives in the relevant jurisdiction.