Senior Security Assurance Specialist

Job Title: Senior Security Assurance Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote — Work From Home

Level: Senior

About the Role

We are seeking an experienced Senior Security Assurance Specialist to support the assessment, monitoring, and improvement of information security controls across enterprise systems, applications, cloud environments, and business operations. This role focuses on security control evaluations, risk assessments, compliance reviews, audit evidence analysis, and assurance reporting.

The successful candidate will work remotely with cybersecurity, IT operations, risk management, compliance, and business teams to evaluate security practices, identify control weaknesses, and recommend practical improvements. The position emphasizes evidence-based assurance, security governance, and continuous control improvement.

Key Responsibilities

• Develop and maintain security assurance plans, assessment methodologies, control evaluation procedures, and reporting standards.
• Conduct remote assessments of information security policies, procedures, technical controls, and operational practices.
• Evaluate the design and effectiveness of security controls across infrastructure, applications, databases, networks, and cloud environments.
• Review security configurations, vulnerability assessment reports, penetration testing results, and remediation evidence.
• Assess security risks associated with information systems, third-party providers, business applications, and technology changes.
• Review identity and access management controls, privileged access arrangements, authentication mechanisms, and user entitlement practices.
• Evaluate security monitoring, incident management, vulnerability management, and business continuity control processes.
• Assess compliance with relevant security frameworks, standards, and regulatory requirements.
• Support security assurance activities aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and COBIT.
• Review security policies, risk registers, control matrices, audit reports, and technical documentation.
• Identify control gaps, security weaknesses, and areas requiring corrective or preventive action.
• Prepare security assessment reports, risk summaries, control effectiveness evaluations, and management recommendations.
• Monitor remediation plans and verify submitted evidence of corrective actions.
• Support internal audits, external security assessments, customer assurance reviews, and regulatory examination preparation.
• Review third-party security questionnaires, supplier assurance documentation, and information security evidence.
• Assist with security governance reporting, key risk indicators, and control performance dashboards.
• Coordinate remotely with technical teams to clarify assessment findings and agree on remediation priorities.
• Recommend improvements to security assurance processes, control testing methods, and evidence management practices.
• Monitor emerging cybersecurity threats, regulatory developments, and changes in recognized security standards.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Significant professional experience in information security, security assurance, IT risk management, cybersecurity auditing, or compliance.
• Strong understanding of information security principles, security control frameworks, and risk assessment methodologies.
• Experience conducting security control reviews, evidence-based assessments, gap analyses, and remediation tracking.
• Knowledge of security technologies and practices involving network security, endpoint protection, encryption, identity management, cloud security, and vulnerability management.
• Familiarity with security standards and frameworks such as ISO 27001, NIST, CIS Controls, SOC 2, and COBIT.
• Experience reviewing penetration testing reports, vulnerability assessments, security incident records, and technical control documentation.
• Understanding of third-party risk management and supplier security assurance processes.
• Proficiency in Microsoft Excel, risk management platforms, audit management systems, and security reporting tools.
• Strong analytical, investigative, and problem-solving abilities.
• Excellent technical documentation, report-writing, and stakeholder communication skills.
• High attention to detail and sound judgment when handling confidential security information.
• Ability to manage multiple assessments independently in a fully remote environment.
• Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, or equivalent are advantageous.

What We Offer

• A 100% remote working arrangement from home.
• Competitive compensation aligned with qualifications and professional experience.
• Opportunities to contribute to enterprise cybersecurity assurance and risk reduction initiatives.
• Exposure to security frameworks, cloud environments, enterprise technology, and governance programs.
• Professional development in information security, IT risk, and compliance assurance.
• A collaborative working environment involving technology, security, audit, and business teams.

How to Apply

Interested candidates should submit an updated CV highlighting relevant experience in cybersecurity assurance, security control assessments, IT risk management, compliance reviews, and security reporting.

Application Subject: Application – Senior Security Assurance Specialist (UAE Remote)

Candidates should confirm applicable employment arrangements, residency requirements, and work authorization before accepting an offer.

Important Role Scope: This is a fully remote security assurance, documentation review, risk analysis, control assessment, and compliance coordination position. Physical infrastructure operations, hardware servicing, on-site security inspections, and activities requiring physical access to facilities or equipment must be performed by qualified local personnel. Production system changes, privileged access administration, incident containment, emergency security actions, sensitive information disclosure, regulatory submissions, and formal compliance attestations must be performed or approved by appropriately authorized personnel under established security and governance procedures.