The IS Analyst - Data Security and Access Governance will support the Access Governance and Data Security Governance functions under the Group Information Security Department. This role is crucial for performing timely access reviews and data security assessments to enhance the company's security posture.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Accountabilities:
- Conduct access reviews on business application access, infrastructure application access, and special accesses granted to users.
- Ensure access governance policies are consistently applied across all access points for staff, including business and infrastructure applications.
- Perform ad-hoc access reviews based on identified risks and escalate issues accordingly.
- Review application matrix for business departments, identifying unauthorized or risky access according to access management principles like the Least Privilege Principle and segregation of duties.
- Coordinate with business units, HR, and ICD to identify unauthorized access and deliver necessary remediation actions.
- Govern privileged access assigned to staff, assess exceptions to the approved access matrix, and highlight identified risks.
- Manage IDAM (Identity and Access Management) and PAM (Privileged Access Management) solutions, ensuring adherence to access governance policies.
- Support the company-wide data classification exercise and develop/maintain Data Loss Prevention (DLP) policies.
- Conduct periodic reviews of data protection policies and maintain updated data registers.
- Create data flow maps from data registers and perform timely KPI and KRI reporting related to data security and access governance.
- Participate in information security programs, compliance assessments, audits, gap analyses, and remediation activities related to data security and access governance.
Required Specialist Skills / Technical Knowledge:
- Understanding of Identity and Access Management solutions and methodologies.
- Familiarity with privileged management solutions and DLP solutions, preferably Forcepoint or Microsoft Purview.
- Knowledge of information security & control frameworks, regulations, international standards, and best practices.
- Experience in managing policy exceptions, documenting them, and identifying compensating controls and remediation plans.
- Ability to work independently without detailed guidance.
- At least one Security, Risk, or IT certification (e.g., CISSP, ITIL, CISM, ISO 27001, Security+) is preferred or in progress.
- A Bachelor’s degree in computer science or information security from an accredited 4-year university is required, with a Master’s degree preferred.
Location: Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates
Work Conditions: Full-time
