Information Security Professional

About the role

ZainTECH is looking for an Information Security Professional to oversee day-to-day security controls, review and analyse security incidents and vulnerability reports from the SOC and Vulnerability Assessment teams, ensure every risk has an owner and is closed, and provide the evidence showing the company is secure and compliant. The role also reviews and follows up on the CISO Office's output.

Key responsibilities

• Review incident reports and tickets, classify them, assess severity and root cause, escalate major incidents, and coordinate containment, recovery and corrective actions
• Analyse incident trends, contribute to post-incident reviews and maintain the incident register
• Review vulnerability assessment and penetration test reports, prioritise findings and track remediation progress
• Review access reviews, endpoint protection, encryption, firewall and network segmentation settings, and cloud security posture (Microsoft 365, Azure, AWS) via CSPM tools
• Maintain the Information Security Risk Register, prepare audit evidence for ISO/IEC 27001 and client due diligence, and support supplier security assessments
• Support data privacy: ROPA, DPIAs, data inventories, data subject rights requests and breach assessments with Legal and Data Protection teams
• Run Business Impact Analysis workshops, define MTPD/RTO/RPO, develop business continuity plans and support DR testing
• Run phishing simulations, deliver security awareness training in English and Arabic, and answer security queries through the security service desk

Required profile

• 2 to 4 years of experience in information security, IT security, SOC or a related technical role
• Bachelor's degree in information security, computer science, information technology or a related field
• Experience in the GCC or wider Middle East, or in a telecom or technology organisation
• Fluency in English and Arabic is mandatory

Required skills

• Familiarity with ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls and ITIL incident and change management
• Knowledge of data privacy principles and personal data protection laws in ZainTECH's markets
• Understanding of BIA and business continuity concepts (RTO, RPO)
• Preferred: CompTIA Security+, CySA+, CEH, GIAC, GSEC, SC-200, AZ-500, AWS Security Specialty, CCNA, NSE, PCNSAI, ISO 22301, IAPP CIPT or ISACA CDPSE