Back to jobs
Emirates Post Group logo

Emirates Post Group

Information Security Associate

🗓️ Posted 2026-08-25 Dubai - United Arab Emirates (UAE) Hybrid ICT

Company shared salary

NA

Market rate

AED 12,000–AED 20,000/mo (AED 144,000–AED 240,000/yr)

Based on similar roles (title + domain + location).

Responsibilities

  • ● Conduct vulnerability assessments and support VAPT activities across networks, applications, systems, mobile applications, and cloud environments.
  • ● Identify, validate, prioritize, and report security vulnerabilities and misconfigurations.
  • ● Support penetration testing and security assessment activities using appropriate tools and methodologies.
  • ● Participate in red team, blue team, tabletop exercises, security simulations, and cyber resilience assessments.
  • ● Analyze security events, indicators of compromise, and attack techniques to identify potential security risks.
  • ● Support remediation activities by coordinating with infrastructure, application, and business teams.
  • ● Conduct security reviews of applications, systems, infrastructure, and technology implementations.
  • ● Assist with threat modelling and security risk assessments for new projects and technology deployments.
  • ● Investigate network related security issues, including DNS activity, suspicious communications, and traffic anomalies.
  • ● Support security monitoring, incident analysis, and root cause investigations when required.
  • ● Maintain security testing methodologies, procedures, and technical documentation.
  • ● Support the implementation and maintenance of information security policies, standards, and procedures.
  • ● Assist with information security risk assessments, risk treatment, and risk tracking.
  • ● Contribute to ISO 27001 compliance and continuous improvement initiatives.
  • ● Support internal and external audits, compliance reviews, and evidence collection.
  • ● Assist in maintaining security controls aligned with regulatory and organizational requirements.
  • ● Support privacy and data protection assessments, including PDPA and other applicable requirements.
  • ● Track security findings, corrective actions, and compliance remediation activities.
  • ● Contribute to security awareness, governance documentation, and information security communications.
  • ● Prepare and maintain vulnerability assessment, penetration testing, risk assessment, and security review reports.
  • ● Maintain risk registers, security findings, remediation trackers, and compliance records.
  • ● Ensure accurate and consistent documentation of security activities and control validation.
  • ● Communicate technical security findings clearly to both technical and non technical stakeholders.
  • ● Contribute to continuous improvement of information security processes and procedures.

Requirements

  • ● Early to mid career information security professional with hands on experience in security testing, vulnerability assessment, and security operations.
  • ● Motivated and technically skilled with an interest in Governance, Risk & Compliance (GRC).