MAIN PURPOSE OF JOB

The Senior Security Analyst plays a key role in strengthening security operations, incident management, and compliance within Mediclinic Middle East, while coordinating closely with other Mediclinic divisions as required. The position is responsible for leading and coordinating incident response activities across the Security Operations Centre (SOC) partners and internal IT teams, developing and maintaining response playbooks, escalation paths, and reporting procedures.

The role also includes implementing, monitoring, and optimising technical security controls across cloud, network, and endpoint environments; supporting risk assessments, vulnerability management, and audit remediation; and defining key performance indicators (KPIs) and service level agreements (SLAs) for managed security service providers.

Additionally, the Senior Security Analyst provides hands-on guidance to IT teams to ensure alignment with corporate security frameworks and contributes to security awareness initiatives and the continuous improvement of processes, tools, and controls.

KEY RESPONSIBILITY AREAS

Security Monitoring and Incident Response
Security Tools, Threat Posture, and Control Optimisation
Risk Assessment, Audit and Compliance Support
Collaboration, Awareness and Continuous Improvement

REQUIRED EDUCATION

Bachelor’s degree in Information Security, Computer Science, or a related field
Microsoft Security Operations Analyst or equivalent
Certified Information Systems Auditor (CISA) Systems Security Certified Practitioner (SSCP) Certified Cloud Security Professional (CCSP

REQUIRED EXPERIENCE

Minimum of 3 years of experience in cybersecurity or security operations
Good understanding of cyber hygiene, threat types, and security principles
Experience working with and configuring enterprise security tools, experience with Defender suite is an advantage
Exposure to auditing and compliance processes
Strong English communication skills, both verbal and written
Prior experience working in a group or multi-division structure is an advantage
Familiarity with security frameworks (e.g., NIST, ISO 27001)
Experience in healthcare, regulated industries, or multi-national environments
Knowledge of ADHICS (Abu Dhabi Healthcare Information and Cyber Security Standard) and its application in healthcare

REQUIRED JOB SKILLS AND KNOWLEDGE