Information Security Specialist

Job Description…

Information Security Specialist

Job Summary
We are looking for an experienced Information Security Specialist to assess, design and strengthen security across enterprise infrastructure, cloud platforms, applications, containers and CI/CD environments. The role will also support security compliance, risk management and security projects.

Key Responsibilities
• Conduct security assessments of servers, networks, databases, applications and cloud infrastructure.
• Identify security vulnerabilities, configuration gaps and risks, and recommend remediation measures.
• Design and implement endpoint security, data protection, encryption and Data Loss Prevention (DLP) solutions to safeguard against malware, ransomware and other threats.
• Implement Microsoft Purview DLP and encryption solutions to protect sensitive information.
• Review security controls across Microsoft Azure and Microsoft 365.
• Assess AWS, Azure, GCP and OCI cloud environments.
• Assess Docker, Kubernetes and OpenShift security.
• Review CI/CD pipelines and DevSecOps practices, including vulnerability scanning and secrets management.
• Support cloud security posture management (CSPM) and SaaS security assessments.
• Assess AI/ML solutions for data, identity, API and access control risks.
• Work with GRC teams on audit findings and regulatory requirements.
• Ensure alignment with CIS, NIST and ISO 27001 security standards.
• Lead security projects from planning through implementation, testing and documentation.
• Coordinate with IT teams, vendors, stakeholders and senior management.

Required Skills & Experience
• Strong infrastructure and cloud security experience.
• Hands-on experience with Microsoft Azure and Microsoft 365 security.
• Knowledge of IAM, Active Directory, RBAC and privileged access management.
• Experience with Kubernetes, containers and CI/CD security.
• Knowledge of CIS, NIST, ISO 27001, GDPR and UAE PDPL.
• Experience in security assessments, risk identification and remediation.
• Understanding of AI security and AI risk management.
• Strong communication, stakeholder management and project management skills.

Preferred Certifications
• CISSP
• Microsoft SC-401
• Microsoft SC-900
• CCSK