Security & Compliance Analyst

• Continuously monitor Microsoft Defender for Cloud and Microsoft Sentinel for threats and anomalies.
• Investigate, triage, and mitigate security incidents across Azure workloads, ensuring adherence to UAE NESA Incident Management controls (IM-xx series).
• Develop and maintain Sentinel analytic rules, automation playbooks, and incident response runbooks.
• Implement preventive and corrective actions to reduce recurring risks and vulnerabilities.

Compliance & Regulatory Alignment

• Ensure Azure resources comply with UAE NESA IA Standards, ADHICS, and global frameworks (ISO 27001, NIST, CIS).
• Utilize Microsoft Purview Compliance Manager and Defender for Cloud dashboards to monitor compliance posture.
• Maintain audit-ready evidence, policy documentation, and reports for NESA and internal audits.
• Support compliance mapping between Azure controls and NESA IA domains (e.g., AC – Access Control, RM – Risk Management, IS – Information Security).

Governance & Policy Enforcement

• Define and enforce Azure Policies, RBAC, and Blueprints aligned to NESA control requirements.
• Implement Zero Trust, least-privilege, and segregation of duties principles across Azure resources.
• Continuously review and remediate non-compliant configurations detected by Defender for Cloud or policy scans.

Risk Assessment & Security Posture Management

• Conduct periodic risk assessments in line with NESA Risk Management (RM-xx) guidelines.
• Identify, prioritize, and mitigate security risks related to infrastructure, identity, and network layers.
• Track risk treatment plans and report posture improvement metrics to management.
• Perform continuous improvement on Azure workloads to maintain a high compliance score.

Security Configuration & Hardening

• Implement security baselines for VMs, App Services, Storage Accounts, Databases, and Key Vaults.
• Secure secrets and credentials using Azure Key Vault and Managed Identities per NESA Data Protection (DP-xx) controls.
• Apply MFA, Conditional Access, and Privileged Identity Management (PIM) to protect administrative accounts.
• Ensure all services use private endpoints, encryption at rest and in transit, and NSG/Firewall policies aligned with NESA network security guidelines.

Collaboration & Advisory

• Partner with DevOps, Infrastructure, and Application teams to embed security-by-design and compliance-by-default in all Azure deployments.
• Review architecture and deployment designs for alignment with NESA IA and Microsoft Cloud Security Baseline controls.
• Provide recommendations, awareness training, and technical guidance on NESA-compliant cloud security practices.

Qualifications :
Required Skills & Qualifications:

• Experience Required: 3+ years in Cloud Security, Compliance, and Governance (preferably Azure)
• Strong knowledge of Azure security services (Microsoft Defender for Cloud, Sentinel, Purview,
• Key Vault, PIM).
• Familiarity with UAE NESA IA Standards, ADHICS, and global frameworks (ISO 27001, NIST,
• CIS).
• Hands-on experience with Azure Policy, RBAC, Blueprints, and Zero Trust principles.
• Proficiency in incident response, risk assessment, and compliance audits.
• Excellent communication and collaboration skills.
• Preferred Certifications:
• Microsoft Certified: Azure Security Engineer Associate
• ISO 27001 Lead Implementer or Auditor
• Certified Information Systems Security Professional (CISSP) or equivalent.