Cybersecurity Specialist - IAM and Vulnerability Management

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.

• Support user, privileged and service-account administration through approved requests and access workflows.
• Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.
• Operate approved vulnerability scanning and reporting tools and validate findings with system owners.
• Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.
• Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.
• Provide metrics, evidence and trend analysis for security reporting and governance reviews.
• Escalate overdue, critical or policy-related matters to the onsite Security Engineer.
• Maintain operational procedures, access-control records and vulnerability-management documentation.
• Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.
• Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.
• Experience with enterprise vulnerability-scanning and remediation-tracking platforms.
• Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.
• Strong understanding of privileged access, least privilege, remediation governance and audit evidence.

Preferred Profile

• Previous experience supporting UAE government or regulated cybersecurity environments.
• Working knowledge of TDRA-hosted environments and related security-access processes.
• Experience operating through secured remote-access and privileged-session controls.

Expected Contribution

• Access and vulnerability activities are completed only through approved workflows.
• Critical findings and overdue actions are escalated with clear ownership.
• Evidence and trackers remain accurate, current and audit-ready.