Cybersecurity Specialist – IAM and Vulnerability Management

About the role

Provide secured remote operational support across identity and access management (IAM) and vulnerability management. The role is responsible for executing approved technical activities, managing access approvals, security policies, risk acceptance and regulatory accountability.

Key responsibilities

• Administer user, privileged and service‑account access through approved requests and workflows.
• Conduct periodic access reviews, joiner/mover/leaver controls and prepare audit evidence.
• Operate approved vulnerability‑scanning and reporting tools, validate findings with system owners and maintain remediation trackers.
• Support IAM, MFA, privileged‑access and directory‑service incidents within authorised boundaries.
• Provide metrics, evidence and trend analysis for security reporting and governance reviews.
• Escalate overdue, critical or policy‑related matters to the onsite Security Engineer.
• Maintain operational procedures, access‑control records and vulnerability‑management documentation.

Required profile

• Minimum 5 years of IAM and/or vulnerability‑management experience.
• Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.
• Experience with enterprise vulnerability‑scanning and remediation‑tracking platforms.
• Relevant certifications such as CEH, OSCP or GPEN preferred.
• Strong understanding of privileged access, least‑privilege principles, remediation governance and audit evidence.
• Preferred experience supporting UAE government or regulated cybersecurity environments and knowledge of TDRA‑hosted environments.
• Experience operating through secured remote‑access and privileged‑session controls.

Required skills

• Microsoft Identity services
• SailPoint
• CyberArk
• Enterprise vulnerability‑scanning tools
• Remediation‑tracking platforms
• MFA solutions
• Directory‑service management
• Access‑workflow administration