Cybersecurity Specialist - IAM and Vulnerability Management

About this role

Provide secured remote operational support across identity and access management and vulnerability management. The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.
•     Support user, privileged and service-account administration through approved requests and access workflows.
•     Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.
•     Operate approved vulnerability scanning and reporting tools and validate findings with system owners.
•     Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.
•     Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.
•     Provide metrics, evidence and trend analysis for security reporting and governance reviews.
•     Escalate overdue, critical or policy-related matters to the onsite Security Engineer.
•     Maintain operational procedures, access-control records and vulnerability-management documentation.
Requirements
•     Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.
•     Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.
•     Experience with enterprise vulnerability-scanning and remediation-tracking platforms.
•     Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.
•     Strong understanding of privileged access, least privilege, remediation governance and audit evidence.
Preferred Profile
•     Previous experience supporting UAE government or regulated cybersecurity environments.
•     Working knowledge of TDRA-hosted environments and related security-access processes.
•     Experience operating through secured remote-access and privileged-session controls.
Expected Contribution
•     Access and vulnerability activities are completed only through approved workflows.
•     Critical findings and overdue actions are escalated with clear ownership.
•     Evidence and trackers remain accurate, current and audit-ready.