{"id":4068720,"url":"https://alion.io/job/zaintech-information-security-professional","title":"Information Security Professional","company":{"id":5748,"name":"ZainTECH","domain":"zaintech.com","url":"https://alion.io/company/zaintech","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":95,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":106,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Amman, Jordan"],"countries":["JO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"ITIL","optional":false},{"name":"NIST CSF","optional":false},{"name":"Service Desk","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-11-11T12:36:31Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T12:36:31Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Information Security Professional is responsible for overseeing day-to-day security controls, reviews and analyses the security incidents and vulnerability reports produced by the dedicated SOC and Vulnerability Assessment (VA) teams, makes sure every risk has an owner and is closed, and produces the evidence that shows ZainTECH is secure and compliant.This role provides the CISO Office review and analysis of their output and drives follow-up actions to closure.\nResponsibilities:\nSecurity Incident Review and Analysis\nReview incident reports and tickets raised by the SOC, ensuring appropriate classification, severity assessment, and handling in accordance with incident response policies and playbooks.\nAssess business impact, affected assets and data, and root causes, escalating significant incidents to the Senior Information Security Professional and CISO.\nCoordinate with IT Operations and system owners to follow up on agreed containment, recovery, and corrective actions, ensuring timely implementation and closure.\nAnalyse incident trends and recurring patterns, recommending improvements to security controls, detection use cases, and SOC playbooks.\nContribute to post-incident reviews and maintain the CISO Office incident register.\nVulnerability Management and Assessment\nReview vulnerability assessment reports and scanning results from the VA team, ensuring appropriate coverage of endpoints, servers, network devices, applications, and cloud workloads.\nAnalyse and prioritise vulnerability findings based on risk, asset criticality, exploitability, and available threat intelligence.\nCoordinate with asset owners to assign remediation activities, monitor progress against agreed timelines, and report overdue remediation items.\nReview penetration testing reports, validate the implementation of agreed remediation measures, and document risk exceptions where remediation is not feasible.\nIdentity, Endpoint, Cloud, and Infrastructure Security\nConduct periodic user access reviews for critical applications, privileged accounts, and third-party access, identifying gaps in privileged access management and multi-factor authentication coverage.\nVerify endpoint protection, encryption, and security hardening baselines, and review firewall, VPN, IDS, and IPS rules and network segmentation against approved security standards.\nReview the security posture of Microsoft 365, Azure, AWS, and other cloud environments using Cloud Security Posture Management (CSPM) tools.\nAssess security requirements for new systems, application onboarding, and infrastructure changes through the Change Advisory process.\nSupport the investigation and follow-up of Data Loss Prevention (DLP) alerts.\nGovernance, Risk, and Compliance\nMaintain assigned entries in the Information Security Risk Register and monitor the implementation of associated risk treatment plans.\nCollect, organise, and maintain security control evidence for ISO/IEC 27001 surveillance audits, internal audits, and client due diligence assessments.\nSupport compliance with applicable regulatory frameworks, cybersecurity standards, and data protection laws across the organization's operating markets, including UAE Information Assurance Standards, Saudi NCA Essential Cybersecurity Controls, Kuwait CITRA requirements, Jordan Cybersecurity Law and Personal Data Protection Law, Egypt Personal Data Protection Law, India's Digital Personal Data Protection Act and CERT-In directions, and applicable UAE and KSA data protection regulations.\nSupport security assessments of suppliers and business partners, ensuring appropriate security requirements and controls are evaluated.\nPrepare and coordinate responses to client and partner security questionnaires and due diligence requests.\nData Privacy and Protection\nSupport the development and maintenance of the Record of Processing Activities (ROPA) in coordination with process owners, documenting processing purposes, data categories, data subjects, legal bases, retention periods, recipients, and systems.\nSupport Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA) for new or modified processing activities, systems, and suppliers, tracking agreed privacy controls through implementation.\nMaintain data inventories and data flow maps, including cross-border data transfers, ensuring alignment with the ROPA.\nReview the implementation of data protection controls, including data classification, minimisation, retention and disposal, consent management, access controls, and encryption.\nSupport the handling of data subject rights requests, including access, correction, and deletion requests, ensuring compliance with applicable regulatory timelines.\nCoordinate with Legal and Data Protection teams to assess personal data breaches and gather relevant information for regulatory and individual notifications.\nConduct privacy reviews of suppliers processing personal data, including reviewing data processing agreements and cross-border data transfer safeguards.\nBusiness Impact Analysis and Business Continuity\nConduct Business Impact Analysis (BIA) workshops and interviews with business units to identify critical services, processes, supporting systems, and their dependencies on people, technology, and suppliers.\nAssess the potential impact of business disruptions over time and recommend Maximum Tolerable Period of Disruption (MTPD), Recovery Time Objectives (RTO), and Recovery Point Objectives (RPO) for critical services.\nDevelop and maintain business continuity plans and recovery procedures for critical services in coordination with process owners, in alignment with ISO 22301.\nSupport business continuity exercises and disaster recovery testing, document outcomes, and track improvement actions through to closure.\nSecurity Awareness\nConduct phishing simulation campaigns and analyse results, providing reports and insights by business unit.\nDevelop and deliver information security awareness content and short training sessions in English and Arabic, where applicable.\nRespond to employee information security queries through the designated security service desk channel.\nOur Culture & Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do - from how we work with each other to how we engage with clients and partners globally.\nRequirements\n2 to 4 years of experience in information security, IT security, SOC, or a related technical role, including reading and analysing security incident and vulnerability assessment reports.\nFamiliarity with ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls, and ITIL \nincident and change management.\nWorking knowledge of data privacy and protection principles and controls, and of the personal data protection laws in ZainTECH's markets.\nUnderstanding of business impact analysis and business continuity concepts, including RTO and RPO.\nExperience in the GCC or wider Middle East region, or in a telecom or technology organisation\nFluency in English and Arabic is mandatory.\nBachelor's degree in information security, computer science, information technology, or a related field.\nAt least one of CompTIA Security+, CompTIA CySA+, EC-Council CEH, GIAC, GSEC, or Microsoft SC-200.\nCloud security certifications such as AZ-500 or AWS Security Specialty, and network certifications such as Cisco CCNA, Fortinet NSE, or Palo Alto PCNSA.\nITIL Foundation certification, ISO 22301 Foundation or Lead Implementer, or a privacy certification such as IAPP CIPT or ISACA CDPSE.","description_format":"text","description_chars":7796,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Arabic","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-11T12:36:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":106,"reasons":["conf:4","win:early"],"computed_at":"2026-11-11T16:52:26Z"},"pay":null,"html_url":"https://alion.io/job/zaintech-information-security-professional","json_url":"https://alion.io/job/zaintech-information-security-professional.json","meta":{"generated_at":"2026-11-11T16:52:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31982,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5748},"rest":"https://alion.io/mcp/rest/get_company?id=5748"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzaintech-information-security-professional"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzaintech-information-security-professional"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzaintech-information-security-professional"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zaintech-information-security-professional\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzaintech-information-security-professional"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4068720}},{"tool":"search_jobs","arguments":{"company":"zaintech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4068720},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}