Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

We are seeking an experienced Senior Security Assurance Specialist to strengthen information security governance, assess cybersecurity controls, evaluate technology risks, and support organizational security assurance activities. The role focuses on reviewing security policies, assessing control effectiveness, analyzing security evidence, coordinating risk assessments, and ensuring that information security practices align with recognized standards and regulatory expectations.

The ideal candidate will have extensive experience in cybersecurity assurance, IT risk management, security compliance, and control assessment. This is a fully remote position focused on digital evidence reviews, risk analysis, security documentation, virtual assessments, and coordination with technology and business stakeholders.

• Develop and maintain information security assurance plans, assessment frameworks, and control evaluation procedures.
• Conduct remote assessments of cybersecurity controls across enterprise applications, infrastructure, cloud environments, and business systems.
• Review security policies, standards, procedures, technical documentation, and governance records.
• Evaluate the design and operating effectiveness of information security controls.
• Assess access management, authentication, encryption, vulnerability management, logging, monitoring, and incident response controls.
• Review security risk assessments, control self-assessments, and technology risk registers.
• Analyze vulnerability reports, penetration testing summaries, security audit findings, and remediation evidence.
• Support security assurance activities aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and other applicable standards.
• Review cloud security configurations, security architecture documentation, and third-party technology risk assessments.
• Coordinate with information security, IT operations, infrastructure, application development, and compliance teams.
• Identify security control weaknesses, assess potential business impacts, and recommend appropriate remediation measures.
• Monitor corrective action plans and validate supporting evidence for closure of security findings.
• Support internal audits, external assessments, regulatory examinations, and customer security reviews.
• Review supplier and third-party security questionnaires, assurance reports, and relevant contractual security requirements.
• Evaluate security incident documentation and assess whether corrective actions address identified control deficiencies.
• Prepare security assurance reports, risk summaries, control matrices, and management presentations.
• Maintain accurate assessment records, evidence registers, remediation trackers, and audit documentation.
• Monitor changes in cybersecurity standards, regulatory requirements, and emerging security threats.
• Recommend improvements to security governance, control maturity, assurance processes, and risk management practices.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Typically 7–10 years of relevant experience in information security, cybersecurity assurance, IT audit, or technology risk management.
• Strong understanding of information security governance, risk management, and assurance methodologies.
• Experience evaluating technical and administrative security controls across enterprise IT environments.
• Knowledge of security frameworks and standards, including ISO 27001, NIST, COBIT, and CIS Controls.
• Familiarity with vulnerability management, penetration testing, identity and access management, encryption, and security monitoring.
• Understanding of cloud security principles and platforms such as AWS, Microsoft Azure, or Google Cloud.
• Experience reviewing security assessment reports, audit evidence, remediation plans, and compliance documentation.
• Knowledge of third-party risk management, supplier security assessments, and information security contractual requirements.
• Familiarity with risk assessment methodologies, control testing, and security maturity evaluation.
• Proficiency in Microsoft Excel, reporting tools, risk registers, and security governance platforms.
• Strong analytical thinking, technical documentation, and problem-solving skills.
• Excellent written and verbal communication abilities.
• Ability to coordinate multiple security assurance activities in a fully remote environment.
• Certifications such as CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor, or equivalent credentials are advantageous.

• 100% remote working arrangement from home.
• Full-time opportunity in cybersecurity assurance and technology risk management.
• Exposure to enterprise security frameworks, cloud environments, and assurance programmes.
• Collaboration with experienced cybersecurity, IT governance, and compliance professionals.
• Opportunities for professional development and career progression.

Interested candidates should submit an updated CV highlighting their cybersecurity assurance experience, security control assessment expertise, risk management capabilities, relevant technical knowledge, and professional certifications.

Application Subject: Application – Senior Security Assurance Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.

• Remote Work Scope: This position is limited to remote security assurance assessments, documentation reviews, evidence analysis, risk evaluation, control testing using authorized remote access, and remediation monitoring. Physical security inspections, on-site infrastructure testing, hardware handling, and facility-based technical assessments must be performed by qualified local personnel. Live production changes, privileged security administration, penetration testing, incident containment, forensic evidence acquisition requiring physical access, regulatory notifications, formal compliance attestations, and material cybersecurity risk acceptance must be performed or approved by appropriately authorized personnel under established security and change-management procedures.