Cybersecurity Specialist - IAM and Vulnerability Management

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.

• Support user, privileged and service-account administration through approved requests and access workflows.

• Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.

• Operate approved vulnerability scanning and reporting tools and validate findings with system owners.

• Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.

• Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.

• Provide metrics, evidence and trend analysis for security reporting and governance reviews.

• Escalate overdue, critical or policy-related matters to the onsite Security Engineer.

• Maintain operational procedures, access-control records and vulnerability-management documentation.

Requirements

• Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.

• Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.

• Experience with enterprise vulnerability-scanning and remediation-tracking platforms.

• Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.

• Strong understanding of privileged access, least privilege, remediation governance and audit evidence.

Preferred Profile

• Previous experience supporting UAE government or regulated cybersecurity environments.

• Working knowledge of TDRA-hosted environments and related security-access processes.

• Experience operating through secured remote-access and privileged-session controls.

Expected Contribution

• Access and vulnerability activities are completed only through approved workflows.

• Critical findings and overdue actions are escalated with clear ownership.

• Evidence and trackers remain accurate, current and audit-ready.