Information Security Specialist - Implementation & Operations (Fixed Contract)

About the Role

The Information Security Specialist – Implementation & Operations (12-month fixed-term contract) is a full-time, on-site position based at the Head Office in Dubai, responsible for the hands-on implementation of priority Information Security Management System (ISMS) initiatives in alignment with ISO/IEC 27001 and corporate security standards.

This is an operational, execution-focused role responsible for translating established security requirements into practical processes, ensuring timely implementation, accurate documentation, and effective knowledge transfer to internal IT teams for long-term sustainability.

How You Will Make an Impact

• Vulnerability Management: Implement corporate vulnerability management procedures within local IT operations, including tracking and remediation follow-ups.
• Backup & Recovery: Assess existing backup and recovery practices, address identified gaps, establish local procedures, and coordinate recovery testing.
• IT Asset Management: Conduct gap assessments and implement standardized security-related asset management processes for local IT assets.
• Security Documentation: Establish and maintain a structured ISMS documentation repository using Microsoft SharePoint.
• Security Awareness: Monitor cybersecurity training, phishing simulations, completion rates, and onboarding awareness activities.
• Risk Management: Onboarding Risk management process and register local asset risks where needed
• Access Management: Implement access control review procedures, and coordinate remediation activities.
• Security Maturity Assessments: Coordinate evidence collection, documentation, and reporting for corporate security assessments.
• Knowledge Transfer: Document implemented processes and provide practical training to internal IT teams to ensure operational continuity.

What You Need to Succeed

Qualifications & Experience

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or a related discipline.
• Minimum 5 years of relevant experience, including demonstrated hands-on ISMS implementation and operational cybersecurity activities.
• Strong working knowledge of ISO/IEC 27001, information security controls, and IT operational processes.
• Practical experience in vulnerability management, backup and recovery, IT asset management, access controls, and security documentation.
• ISO 27001 certification or relevant cybersecurity certification is an advantage.

Key Competencies

• Teamwork & Adaptability to Organizational Maturity: Patiently supports internal IT teams at developing ISMS maturity levels, translating security requirements into plain, practical terms.
• Proactive Information Gathering: Actively engages stakeholders with humility and respect, adapting to company workflows to clarify ambiguities and organize unstructured information.
• Strong Execution and Delivery Mindset: Prioritizes practical execution over high-level advisory or auditing, willingly rolling up sleeves to handle routine operational and administrative tasks.
• Detail-Oriented Accountability: Ensures high accuracy in documentation, structured tracking, and persistent follow-ups to complete deliverables on time.

Expected Deliverables – 12-Month Contract

• Implementation of assigned priority ISMS processes and local operating procedures.
• Documented improvements in security controls, compliance readiness, and operational practices.
• Completion of agreed milestones, assessments, and remediation activities within the contract period.
• Comprehensive documentation and structured knowledge transfer to ensure sustainability after contract completion.