Senior Analyst, Information Security

M42 Health

Abu Dhabi, UAE

Full Time

Senior

Onsite

1 weeks ago

Information SecurityRisk ManagementComplianceISO 27001ISO 27701HIPAA

Apply

Free

Job Fit Check

Base Career helps you apply smarter for this job.

Ready to Scan

Key skills for this role

Information SecurityRisk ManagementCompliance

Smart Apply

About the Role

M42 Health seeks a Senior Information Security Analyst to develop and maintain an enterprise-wide Information Security Framework. You will manage security risks, ensure regulatory compliance, lead security projects, and respond to incidents.

Key Skills for This Role

Information SecurityRisk ManagementComplianceISO 27001ISO 27701HIPAA

Responsibilities

Develop, implement, and maintain an enterprise wide Information Security Framework aligned with international standards and regulatory requirements
Define and execute the information security and compliance strategy in alignment with M42 objectives
Establish and operate a healthcare focused information security risk management framework
Conduct technology risk assessments for new business initiatives and IT projects
Ensure appropriate management visibility of security risks, including impact, mitigation plans, and associated costs
Perform regulatory gap analysis, industry benchmarking, and control maturity assessments
Develop, monitor, and report information security and IT risk metrics, including KRIs and KPIs
Lead the planning and delivery of information security initiatives and projects
Investigate, manage, and respond to information security and data privacy incidents
Oversee the implementation, monitoring, and effectiveness of information security and IT controls across the healthcare environment
Coordinate with IT GRC, internal audit, and external audit teams to implement regulatory and audit recommendations
Manage regulatory submissions (including ADHICS) and remediate identified compliance gaps

Requirements

Bachelor’s or Master’s degree in IT, Computer Science, Software Engineering, or a related field
5 10 years of professional experience in Information Security, with a minimum of 5 years within the healthcare industry
Proven experience in information security governance, risk management, compliance, and security operations
Strong knowledge of healthcare and data protection regulations (e.g., ADHICS, HIPAA, GDPR, HITRUST, DOH)
Hands on experience conducting technology risk assessments and Risk Control Self Assessments (RCSA)
Solid understanding of international security standards and frameworks (e.g., ISO 27001, ISO 27701)
Experience working with cloud security architectures and cloud service models
Excellent written and verbal communication skills
Strong stakeholder management skills
Relevant industry certifications such as CISA, CISM, CISSP, CCSP, or cloud security certifications (Azure/AWS)
Experience working in the UAE or similar regulated healthcare environments (preferred)
ITIL v4 certification (preferred)

Full Job Posting

Overview

M42 is a global health champion powered by artificial intelligence (AI), technology and genomics to advance innovation in health for people and the planet. Headquartered in Abu Dhabi, M42 combines its specialized, state of the art facilities with integrated health solutions like genomics and biobank
The role is responsible for developing, implementing, and maintaining an Information Security Framework, including policies, standards, and processes aligned with international best practices and regulatory requirements. The position plays a critical role in managing information security risks, ensu

Responsibilities

Develop, implement, and maintain an enterprise wide Information Security Framework aligned with international standards (e.g., ISO 27001, ISO 27701, HIPAA) and regulatory requirements (e.g., ADHICS, ADGM, GDPR, NESA).
Define and execute the information security and compliance strategy in alignment with M42 objectives, recommending appropriate controls, tools, and technologies.
Establish and operate a healthcare focused information security risk management framework aligned with M42 enterprise risk management practices.
Conduct technology risk assessments for new business initiatives and IT projects, including driving Risk Control Self Assessments (RCSA).
Ensure appropriate management visibility of security risks, including impact, mitigation plans, and associated costs.
Perform regulatory gap analysis, industry benchmarking, and control maturity assessments to identify improvement opportunities.
Develop, monitor, and report information security and IT risk metrics, including KRIs and KPIs.
Lead the planning and delivery of information security initiatives and projects in line with regulatory and business requirements.
Investigate, manage, and respond to information security and data privacy incidents, including maintaining and testing the incident response plan.
Oversee the implementation, monitoring, and effectiveness of information security and IT controls across the healthcare environment.
Coordinate with IT GRC, internal audit, and external audit teams to implement regulatory and audit recommendations.
Manage regulatory submissions (including ADHICS) and remediate identified compliance gaps.

Qualifications

Bachelor’s or Master’s degree in IT, Computer Science, Software Engineering, or a related field.
5 10 years of professional experience in Information Security, with a minimum of 5 years within the healthcare industry.
Proven experience in information security governance, risk management, compliance, and security operations.
Strong knowledge of healthcare and data protection regulations (e.g., ADHICS, HIPAA, GDPR, HITRUST, DOH).
Hands on experience conducting technology risk assessments and Risk Control Self Assessments (RCSA).
Solid understanding of international security standards and frameworks (e.g., ISO 27001, ISO 27701).
Experience working with cloud security architectures and cloud service models.
Excellent written and verbal communication skills, with the ability to explain security and risk concepts to technical and non technical audiences.
Strong stakeholder management skills, including engagement with senior leadership, auditors, and regulators.
Relevant industry certifications such as CISA, CISM, CISSP, CCSP, or cloud security certifications (Azure/AWS).
Experience working in the UAE or similar regulated healthcare environments (preferred).
ITIL v4 certification (preferred).

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More jobs at M42 Health

Clinical Trial Assistant – Emirati National

Abu Dhabi, UAE

EntryFulltime

Overview M42 is a global health champion powered by artificial intelligence (AI), technology and genomics to advance innovation in health for people and the planet. Headquartered in Abu Dhabi, M42 combines its specialize

1 months agoView →

Specialist, LIMS

Abu Dhabi, UAE

Mid-SeniorFulltime

1 months agoView →