Information Security Specialist
Summary
Protects the Dubai Culture & Arts Authority's information assets by monitoring security controls, analyzing vulnerabilities and incidents, and remediating threats. Day-to-day work covers security monitoring, vulnerability scanning and remediation, access reviews, risk assessment, and compliance with government information security standards.
Responsible for protecting information assets and technical systems from security risks and threats in accordance with approved policies and standards. Monitors security controls and procedures to detect vulnerabilities and incidents, address them, and mitigate their impacts. Additionally, contributes to raising the organization's security maturity level by developing security controls and procedures, enhancing cyber awareness, and monitoring compliance with information security requirements.
- Monitor and assess security risks and vulnerabilities, analyze incidents and threats, and take corrective and preventive actions to mitigate their impacts and enhance the level of protection.
- Support the implementation of information security governance, risk management, and compliance frameworks, ensuring the application of security controls to maintain confidentiality, integrity, availability of information, and service continuity.
- Apply and monitor information security controls across the organization's systems, networks, and applications in accordance with approved policies, standards, and security procedures.
- Monitor security events and alerts, analyze indicators and reports to detect suspicious activities or intrusion attempts, and raise necessary recommendations.
- Contribute to the management and remediation of security vulnerabilities by conducting periodic scans, tracking remediation plans, and ensuring priority vulnerabilities are closed.
- Evaluate security risks associated with technical systems and services within the organization, identify risks, and establish appropriate procedures and controls to mitigate them.
- Review information and system access permissions to ensure the enforcement of the principle of least privilege, monitor unauthorized accounts and privileges, and prepare security reports and logs.
- Monitor compliance with government information security requirements and standards, conduct periodic assessments and reviews, document non-compliance cases, and track corrective actions.
- Perform other job-related duties and responsibilities as assigned.