Information Security Associate

Role Overview

We are hiring an Information Security Associate to help strengthen security practices across the company. This position focuses on supporting the rollout and upkeep of security controls, watching for threats and incidents, performing risk reviews, assisting with response activities, and helping build awareness around secure behavior.

Key Responsibilities

• Help implement and maintain information security frameworks, policies, and controls.
• Assist with compliance efforts aligned to standards such as ISO 27001, NIST, and PCI-DSS.
• Take part in security reviews and audits for applications, systems, and infrastructure.
• Evaluate security needs for new tools, technologies, and business initiatives.
• Monitor security events and incidents and support day-to-day security operations.
• Contribute to SOC activities, tracking, and operational reporting.
• Assist in vulnerability assessments and follow-up remediation work.
• Support the deployment of controls that safeguard sensitive information.
• Carry out information security risk assessments and help identify exposures.
• Recommend practical mitigation actions for discovered risks and vulnerabilities.
• Support reviews of third-party and vendor security posture.
• Participate in incident investigations and prepare related reports.
• Assist with root cause analysis and the creation of corrective action plans.
• Support digital forensics efforts and evidence handling when needed.
• Help design and deliver security awareness sessions and training initiatives.
• Encourage and promote secure working practices throughout the organization.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
• 0 to 3 years of experience in information security or cybersecurity.
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, or PCI-DSS.
• Understanding of network security, risk assessment, vulnerability management, and incident response processes.

Preferred Certifications

• CISSP
• CRISC
• SANS certifications
• ISO 27001-related certifications

Technical Skills

• Security operations center (SOC) support
• Security event monitoring
• Risk assessment
• Vulnerability management
• Incident response
• Network security
• Digital forensics
• Security reporting and analytics

Competencies

• Initiative
• Innovation
• Teamwork
• Accountability
• Quality orientation
• Customer service mindset

Additional Information

This opportunity is based in Dubai, United Arab Emirates and is a full-time, onsite position. No salary, stipend, or vacancy count was specified in the source.