Senior Security Assurance Specialist

Job Title: Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Security Assurance Specialist to assess, monitor, and strengthen the organization's information security controls, technology risk posture, and compliance practices. The role focuses on security control assessments, assurance reviews, risk identification, audit coordination, remediation tracking, and continuous improvement of security governance. The successful candidate will work closely with cybersecurity, IT, risk, compliance, and business teams to provide independent, evidence-based assurance that security requirements are appropriately designed and implemented.

Key Responsibilities

• Develop and execute security assurance plans, control assessment schedules, and review methodologies.
• Evaluate the design and operating effectiveness of information security controls across applications, infrastructure, cloud environments, and business processes.
• Conduct remote security control reviews using technical evidence, system documentation, configuration records, policies, and audit trails.
• Assess compliance with internal security policies, contractual obligations, and applicable regulatory requirements.
• Review security governance frameworks and control mappings against standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and COBIT.
• Identify control weaknesses, security gaps, vulnerabilities, and areas of non-compliance.
• Perform risk-based assessments of technology environments, third-party services, and critical business systems.
• Review vulnerability management reports, penetration testing findings, security assessments, and remediation evidence.
• Evaluate identity and access management controls, privileged access practices, authentication requirements, and access review processes.
• Assess security incident management procedures, business continuity controls, backup arrangements, and disaster recovery readiness.
• Review security architecture documentation and proposed technology changes to identify potential control implications.
• Coordinate security assurance activities with internal audit, external auditors, risk management, and compliance teams.
• Maintain security findings registers, risk assessments, control matrices, and remediation tracking records.
• Monitor corrective action plans and validate submitted evidence before recommending closure of findings.
• Prepare management reports, assurance summaries, risk dashboards, and recommendations for control improvement.
• Provide practical guidance to system owners and control stakeholders on addressing security deficiencies.
• Support third-party security assurance activities, including review of supplier questionnaires, certifications, and independent assessment reports.
• Identify opportunities to automate assurance evidence collection, control monitoring, and reporting processes.
• Contribute to the continuous improvement of security assurance methodologies, procedures, and governance standards.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Typically 5–8 years of experience in information security, security assurance, IT audit, technology risk, or cybersecurity governance.
• Strong understanding of information security principles, security control frameworks, and risk-based assurance methodologies.
• Practical experience assessing technical and organizational security controls.
• Familiarity with ISO 27001, NIST CSF, NIST SP 800 series, CIS Controls, and related security standards.
• Knowledge of vulnerability management, penetration testing processes, security incident management, and remediation practices.
• Understanding of cloud security, network security, endpoint protection, application security, and identity governance.
• Experience reviewing security policies, procedures, risk registers, control evidence, and audit documentation.
• Ability to interpret technical security reports and translate findings into clear business risks and recommendations.
• Familiarity with GRC platforms, security assessment tools, and risk management reporting systems.
• Strong analytical, investigative, and problem-solving skills.
• Excellent report-writing, documentation, and stakeholder communication abilities.
• Ability to manage multiple assurance reviews and remediation activities independently.
• High standards of confidentiality, professional integrity, and attention to detail.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer are advantageous.

What We Offer

• 100% remote working arrangement from within the United Arab Emirates, subject to applicable employment and work authorization requirements.
• Competitive compensation based on experience and professional qualifications.
• Opportunities to contribute to enterprise-wide cybersecurity and risk management initiatives.
• Collaborative working environment with technology, audit, risk, and compliance professionals.
• Ongoing professional development and opportunities for career advancement.

How to Apply

Interested candidates should submit an updated CV highlighting their security assurance experience, control assessment expertise, cybersecurity frameworks, audit exposure, and relevant professional certifications.

Application Subject: Application – Senior Security Assurance Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.

• Remote-work scope and authorization: This is a fully remote security assurance position focused on evidence-based assessments, documentation reviews, risk analysis, control testing using authorized remote access, and remediation monitoring. Physical security inspections, on-site infrastructure testing, hardware handling, and activities requiring local facility access must be performed by appropriately qualified local personnel. Live production changes, penetration testing, security incident containment, formal compliance attestations, regulatory submissions, and acceptance of material security risks must be conducted or approved by personnel with the required authorization and delegated responsibility.