Cybersecurity Specialist - IAM and Vulnerability Management

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.

•     Support user, privileged and service-account administration through approved requests and access workflows.

•     Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.

•     Operate approved vulnerability scanning and reporting tools and validate findings with system owners.

•     Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.

•     Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.

•     Provide metrics, evidence and trend analysis for security reporting and governance reviews.

•     Escalate overdue, critical or policy-related matters to the onsite Security Engineer.

•     Maintain operational procedures, access-control records and vulnerability-management documentation.

•     Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.

•     Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.

•     Experience with enterprise vulnerability-scanning and remediation-tracking platforms.

•     Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.

•     Strong understanding of privileged access, least privilege, remediation governance and audit evidence.

Preferred Profile

•     Previous experience supporting UAE government or regulated cybersecurity environments.

•     Working knowledge of TDRA-hosted environments and related security-access processes.

•     Experience operating through secured remote-access and privileged-session controls.

Expected Contribution

•     Access and vulnerability activities are completed only through approved workflows.

•     Critical findings and overdue actions are escalated with clear ownership.

•     Evidence and trackers remain accurate, current and audit-ready.