{"id":198530,"url":"https://alion.io/job/royal-joinery-information-security-consultant","title":"Information Security Consultant","company":{"id":453533,"name":"United Al Saqer Group","domain":"alsaqergroup.com","url":"https://alion.io/company/alsaqergroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":{"grade":"A","score":93,"open_postings":65,"ghost_share":0.031,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":175,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Abu Dhabi, United Arab Emirates"],"countries":["AE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":62000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"CAPA","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-12T19:19:57Z","employer_posted_date":"2026-08-12","last_verified_at":"2026-10-30T16:44:12Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":77},"description":"Established more than 40 years ago, the United Al Saqer Group (UASG) is one of the leading multi-sector business groups in the United Arab Emirates. The UASG owns and operates a diverse yet complementary portfolio of six UAE-based companies encompassing several key industry sectors, which includes Abu Dhabi Motors, Dalma Motors, Al Saqer Heavy Equipment, Al Saqer Property Management, Royal International Construction, and Royal Joinery.\nWe are recruiting a Information Security Consultant to join our exceptional ICT Department. The person is responsible for providing expert guidance on information security strategies, assessing risks, developing policies, and implementing solutions to safeguard the organization’s data, systems, and infrastructure. The Information Security Consultant ensures compliance with cybersecurity standards and supports the organization’s efforts in mitigating security threats and vulnerabilities.\nAREA OF RESPONSIBILITY:\nSecurity Operations & Threat Management:\nManage and operate security tools including SIEM, EDR, PAM, DLP, and IDS/IPS to detect, analyse, and respond to threats.\n\nLead the response to security incidents and breaches, performing root cause analysis and implementing corrective and preventive actions.\n\nProactively hunt for threats across the IT landscape, ensuring the security of core network assets, email gateways, and cloud services.\n\nConduct regular vulnerability scans and coordinate penetration testing, validate findings, and drive remediation efforts with relevant teams.\n\nMonitor and optimize security logs and alerts to ensure effective detection and timely escalation of suspicious activities.\n\nSecurity Architecture & Engineering:\nProvide expert advice on secure system designs, network defenses, access controls, and encryption standards.\n\nSecure cloud configurations in multi-cloud environments, with hands-on expertise in Azure and Microsoft 365, including the implementation of logging, encryption, and secure DevOps practices.\n\nImplement and manage Identity & Access Management (IAM) and Privilege Access Management (PAM) solutions, enforcing least privilege access through regular privilege audits and access reviews.\n\nConduct security architecture reviews for new projects, applications, and integrations, ensuring alignment with best practices and compliance standards.\n\nSupport Zero Trust adoption and embed security into the software development lifecycle (SDLC) by enforcing secure access principles, promoting secure coding practices, and integrating DevSecOps\n\nEvaluate, recommend, and deploy security tools and technologies to strengthen the organization’s defensive posture.\n\nGovernance, Risk & Compliance:\nDevelop, maintain, and implement corporate information security policies, standards, and procedures aligned with organizational processes and industry best practices.\n\nAssist in the maintenance and continual improvement of the Information Security Management System (ISMS), ensuring compliance and documentation aligned with key standards and regulations such as ISO 27001, ISO 20000-1, and UAE IA, PDPL., GDPR\n\nConduct risk assessments on internal systems, business processes, and third-party vendors to evaluate security controls and ensure compliance with corporate policies and regulatory requirements.\n\nSupport internal and external audits by preparing documentation, evidence of controls, and responses to audit findings.\n\nPromote a strong security culture by supporting awareness and training programs, ensuring staff understand their compliance responsibilities.\n\nDefine and track security KPIs and metrics to measure program effectiveness and report on risk posture to management.\n\nReporting & Continuous Improvement:\nPrepare clear and detailed reports on security incidents, risk assessment findings, audit outcomes, and remediation progress for management and stakeholders.\n\nTrack and analyse security metrics, trends, and KPIs to measure control effectiveness and highlight areas for improvement\n\nCapture lessons learned from incidents, tests, and assessments, and integrate them into security processes, playbooks, and awareness programs\n\nResearch emerging threats, new attack techniques, and innovative security tools to continuously strengthen detection and response capabilities.\n\nParticipate in Business Continuity (BCP) and Disaster Recovery (DR) testing, as well as cyber crisis tabletop exercises, to validate preparedness and strengthen organizational resilience.\n\nRequirements\nQUALIFICATIONS & CERTIFICATIONS & EXPERIENCE (MANDATORY & PREFERRED):\nBachelor’s degree in computer science, Information Security, or a related field\n\nA minimum of 4-6 years of hands-on experience in a cybersecurity or IT security role.\n\nCertifications (Mandatory): CISSP or CISM.\n\nCertifications (Preferred): ISO 27001 Lead Implementer or Lead Auditor, Cloud/Azure security certifications, and technical certifications such as CEH or OSCP.\n\nKnowledge: Strong understanding of security frameworks (e.g., ISO 27001, NIST CSF), risk management principles, and regulatory compliance (e.g., GDPR, UAE PDPL). Familiarity with IT Service Management (ITIL best practices) is preferred.\n\nSKILLS & COMPETENCIES (Technical, Behavioral, and Soft):\nTechnical Competencies:\nSecurity Operations - Strong hands-on expertise in incident response, log analysis, IOC analysis and managing platforms like SIEM, EDR, PAM and DLP\n\nVulnerability Management - Proficiency with penetration testing and vulnerability assessment tools.\n\nNetwork & Cloud Security - Strong knowledge of firewalls, IDS/IPS, WAF, VPNs, and security configurations in hybrid environments.\n\nIdentity & Access Management (IAM) and Privileged Access Management (PAM) - Experience with IAM/PAM solutions and implementing access controls, as well as data protection measures such as encryption and data classification.\n\nOther Competencies:\nFrameworks & Standards: Familiarity with ISO 27001, ISO 20000-1, NIST CSF, MITRE ATT&CK, and CIS Controls.\n\nCompliance: Experience with compliance efforts for regulations such as UAE Information Assurance (IA) Standards, PDPL and GDPR.\n\nIntegrity and Compliance - Aligns all actions and decisions with organizational policies and procedures, demonstrating a strong commitment to professional standards and ethics.\n\nAnalytical & Problem-Solving Skills - Exhibits strong analytical, troubleshooting, and problem-solving skills, with a proven ability to work effectively under pressure.\n\nBusiness Acumen - Understands the challenges and objectives of internal business units and takes the initiative to provide effective and pragmatic security solutions.\n\nCommunication Skills - Possesses excellent written and verbal communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.\n\nBehavioural Competencies:\nCustomer Focus - Understands customer challenges and takes initiative to resolve them effectively.\n\nAccountability and Ownership - Manages projects with minimal supervision and ensures quality results.\n\nAgility and Adaptability - Manages change smoothly and supports others during transitions.\n\nCollaboration & Influence - Builds networks across functions and resolves conflicts constructively.\n\nResult Orientation - Sets clear goals and works proactively to achieve high performance.\n\nLocation: Abu Dhabi","description_format":"text","description_chars":7350,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property Management","Construction","Car Dealerships","Auto Parts & Accessories Retail"],"lifecycle":[{"event":"open","at":"2026-09-03T22:05:52Z"}],"visa":[],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.85,"p_room":0.72,"age_days":78,"expected_fill_days":175,"reasons":["conf:2","win:mid","crowd:"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/royal-joinery-information-security-consultant","json_url":"https://alion.io/job/royal-joinery-information-security-consultant.json","meta":{"generated_at":"2026-10-30T17:24:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5898,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":453533},"rest":"https://alion.io/mcp/rest/get_company?id=453533"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froyal-joinery-information-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froyal-joinery-information-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froyal-joinery-information-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/royal-joinery-information-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froyal-joinery-information-security-consultant"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":198530}},{"tool":"search_jobs","arguments":{"company":"alsaqergroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":198530},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}