وظائف مفتش أمن في الأردن

<h2 class="h5">Job description</h2><div class="t-break" data-jb-field="description"><span><br>POSITION SUMMARY<br>Remove and separate soiled laundry from chutes or housekeeping carts. Operate and monitor washing, dry cleaning, and drying machinery in accordance with company standards. Apply correct treatment to stained items based on fabric and stain type. Maintain accurate records of items washed, number of loads, and poundage of dry cleaning and laundry. Transport cart of washed articles to dryers and place in dryers according to load size. Remove lint and debris from dryer screens, dry cleaning filters, and drain trap after each load. Monitor levels in chemical containers to ensure chemicals are being dispensed and notify supervisor/manager of potential pump problem.<br>Follow all company and safety and security policies and procedures; report any maintenance problems, safety hazards, accidents, or injuries; complete safety training and certifications. Ensure uniform and personal appearance are clean and professional; maintain confidentiality of proprietary information; protect company assets. Develop and maintain positive working relationships with others; support team to reach common goals; listen and respond appropriately to the concerns of other employees. Ensure adherence to quality expectations and standards. Visually inspect tools, equipment, or machines (e.g., to identify defects). Stand, sit, or walk for an extended period of time or for an entire work shift. Move, lift, carry, push, pull, and place objects weighing less than or equal to 25 pounds without assistance. Move through narrow, confined, or elevated spaces. Move over sloping, uneven, or slippery surfaces as well as up and down stairs and/or service ramps. Reach overhead and below the knees, including bending, twisting, pulling, and stooping. Perform other reasonable job duties as requested by Supervisors.<br>PREFERRED QUALIFICATIONS<br>Education: No high school diploma or G.E.D. equivalent.<br>Related Work Experience: No related work experience.<br>Supervisory Experience: No supervisory experience.<br>License or Certification: None<br>At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.<br>Marriott Hotels strive to elevate the art of hospitality, innovating at every opportunity while keeping the comfort of the oh-so-familiar all around the globe. As a host with Marriott Hotels, you will help keep the promise of "Wonderful Hospitality. Always." by delivering thoughtful, heartfelt, forward-thinking service that upholds and builds upon this living legacy. With the name that's synonymous with hospitality the world over, we are proud to welcome you to explore a career with Marriott Hotels. In joining Marriott Hotels, you join a portfolio of brands with Marriott International. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.<br>JW Marriott is part of Marriott International's luxury portfolio and consists of more than 100 beautiful properties in gateway cities and distinctive resort locations around the world. JW believes our associates come first. Because if you're happy, our guests will be happy. JW Marriott associates are confident, innovative, genuine, intuitive, and carry on the legacy of the brand's namesake and company founder, J.Willard Marriott. Our hotels offer a work experience unlike any other, where you'll be part of a community and enjoy true camaraderie with a diverse group of co-workers. JW creates opportunities for training, development, recognition and most importantly, a place where you can pursue your passions in a luxury environment with a focus on holistic well-being. Treating guests exceptionally starts with the way we take care of our associates. That's The JW Treatment. In joining JW Marriott, you join a portfolio of brands with Marriott International. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.</span></div>

<p dir="RTL">&nbsp;</p> <p dir="RTL"><strong>Specialized Training Opportunity in Aqaba</strong></p> <p dir="RTL"><strong>Rigger Training Course</strong> &nbsp;<strong><span dir="LTR">Rigger</span></strong></p> <p dir="RTL">&nbsp;</p> <p dir="RTL">Offered by the Water Efficiency and Public Expenditure (WEC) project with support from the United States Government</p> <p dir="RTL">&nbsp;</p> <p dir="RTL"><strong>Do you work in rigging and load directing within industrial and infrastructure projects?</strong></p> <p dir="RTL">We invite you to register for a <strong>specialized training program to develop the competence of riggers</strong>, which combines theoretical foundation with practical application. The goal is to enhance the competence of riggers in areas such as selecting appropriate rigging angles, reading and applying load charts, and inspecting lifting equipment and gear within the industrial sector and infrastructure projects, in accordance with best safety practices and professional requirements accredited by the Lifting Equipment Engineers Association (LEEA), based in the United Kingdom.</p> <p dir="RTL">&nbsp;</p> <p dir="RTL"><strong><u>About the Program</u></strong></p> <p dir="RTL">A specialized training program spanning <strong>six days for a total of 42 training hours</strong>, with seven training hours per day, combining theoretical knowledge and practical applications.</p> <p dir="RTL">The program focuses on enhancing safe rigging and load directing skills, effective coordination with crane operators and lifting teams, and commitment to safety procedures and operational discipline, thereby contributing to the efficient and safe execution of lifting operations and reducing risks associated with handling and lifting loads at industrial work sites.</p> <p dir="RTL"><strong><u>Target Audience and Enrollment Requirements</u></strong></p> <p dir="RTL"><strong>The program primarily targets:</strong></p> <ul> <li dir="RTL">Workers in lifting teams, industrial projects, and infrastructure projects</li> <li dir="RTL">Previous experience (more than one year) in rigging, preparing, and directing loads within the industrial sector or infrastructure projects</li> <li dir="RTL">Individuals whose nature of work requires developing their practical competence and obtaining a certificate according to LEEA requirements</li> <li dir="RTL">Applicants must be of Jordanian nationality</li> <li dir="RTL">Must be at least 18 years old</li> <li dir="RTL">Must be medically fit and of good conduct</li> <li dir="RTL">Must be prepared and able to commit to attending the entire training program in Aqaba</li> </ul> <p dir="RTL"><strong><u>Program Duration</u></strong></p> <p dir="RTL">Six days – 42 training hours</p> <p dir="RTL">Seven training hours per day</p> <p dir="RTL">Location: Aqaba</p> <p dir="RTL">Training Schedule: During the month of December (from Saturday, December 5th to Thursday, December 10th, 2026)</p> <p dir="RTL"><strong><u>Required Documents upon Selection</u></strong></p> <p dir="RTL">Selected participants will be required to submit:</p> <ul> <li dir="RTL">A copy of their national ID card</li> <li dir="RTL">A valid certificate of good conduct</li> <li dir="RTL">Any relevant previous training or professional certificates</li> </ul> <p dir="RTL">&nbsp;</p> <p dir="RTL"><strong><u>Assessment and Certification</u></strong></p> <p dir="RTL">The program includes a practical assessment and a final exam according to LEEA requirements.</p> <p dir="RTL">Program procedures and certification are completed according to the requirements of the accredited body and the conditions for passing the assessment and examination.</p> <p dir="RTL"><strong><u>Registration</u></strong></p> <p dir="RTL">Those wishing to participate in the training program should apply via the Akhtaboot website and complete the <strong>electronic training application form</strong> through the following link:</p> <p dir="RTL"><a href="https://iwd-jo.com/"><span dir="LTR">https://iwd-jo.com</span>/</a></p> <p dir="RTL"><strong>Please note that the deadline for receiving applications is <u>November 2, 2026</u></strong></p> <p dir="RTL"><strong>Spaces are limited, and participation will be confirmed based on the acceptance criteria outlined above.</strong></p> <p dir="RTL"><strong>We would also like to note that the training program is free, and no fees will be collected from participants during registration or participation in the training program.</strong></p> <p dir="RTL">&nbsp;</p>

<p dir="LTR">&nbsp;</p><p dir="LTR"><strong>Specialized training opportunity in the city of Aqaba</strong></p><p dir="LTR"><strong>Lift Supervisor Course</strong></p><p dir="LTR">Presented by the Water Efficiency and Public Expenditure (WEC) project with support from the Government of the United States of America</p><p dir="LTR">&nbsp;</p><p dir="LTR"><strong>Do you work in the field of lifting operations within industrial and infrastructure projects?</strong></p><p dir="LTR">We invite you to register for a <strong>specialized training program for Lift Supervisors</strong>, which combines theoretical foundations with practical applications. The goal is to develop the competence of lifting operation supervisors in load calculation, leadership, coordination, and the management of lifting operations within the industrial sector and infrastructure projects, in accordance with best safety practices and professional requirements accredited by the Lifting Equipment Engineers Association (LEEA), based in the United Kingdom.</p><p dir="LTR">&nbsp;</p><p dir="LTR"><strong><u>About the Program</u></strong></p><p dir="LTR">A specialized training program spanning <strong>six days with a total of 42 training hours</strong>, at seven training hours per day, combining theoretical knowledge and practical applications.</p><p dir="LTR">The program focuses on enhancing the ability to safely plan and execute lifting operations, raising the level of coordination between work teams, and establishing safety practices and operational discipline, thereby contributing to improved efficiency in lifting operations and reducing operational risks in industrial workplaces.</p><p dir="LTR">&nbsp;</p><p dir="LTR"><strong><u>Target Audience and Eligibility Requirements</u></strong></p><p dir="LTR"><strong>The program primarily targets:</strong></p><ul><li dir="LTR">Personnel working within lifting teams, industrial projects, and infrastructure projects who have prior experience in supervising lifting operations.</li><li dir="LTR">Individuals whose job nature requires developing their practical competence and obtaining certification according to LEEA requirements.</li><li dir="LTR">Applicants must be of Jordanian nationality.</li><li dir="LTR">Must be at least 18 years old.</li><li dir="LTR">Must be in good health and of good conduct.</li><li dir="LTR">Must be prepared and able to commit to attending the entire training program in the city of Aqaba.</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR"><strong><u>Program Duration</u></strong></p><p dir="LTR">Six days – 42 training hours</p><p dir="LTR">Seven training hours per day</p><p dir="LTR">Location: Aqaba City</p><p dir="LTR">Training Dates: During the month of November (from Saturday, November 14 to Thursday, November 19, 2026)</p><p dir="LTR">&nbsp;</p><p dir="LTR"><strong><u>Documents Required Upon Selection</u></strong></p><p dir="LTR">Participants who are selected will be required to provide:</p><ul><li dir="LTR">A copy of their national ID.</li><li dir="LTR">A valid certificate of good conduct.</li><li dir="LTR">Any relevant previous training or professional certificates.</li></ul><p dir="LTR">&nbsp;</p><p dir="LTR"><strong><u>Assessment and Certification</u></strong></p><p dir="LTR">The program includes a practical assessment and a final exam according to LEEA requirements.</p><p dir="LTR">Program procedures and certification are completed in accordance with the requirements of the accrediting body and the conditions for passing the assessment and exam.</p><p dir="LTR">&nbsp;</p><p dir="LTR"><strong><u>Registration</u></strong></p><p dir="LTR">Those wishing to participate in the training program should apply via the Akhtaboot website and fill out the <strong>online training application form</strong> through the following link:</p><p dir="LTR"><a href="https://iwd-jo.com/">https://iwd-jo.com/</a></p><p dir="LTR"><strong>Please be advised that the deadline for receiving applications is <u>October 19, 2026</u>.</strong></p><p dir="LTR"><strong>Spaces are limited, and participation will be confirmed based on the eligibility criteria outlined above.</strong></p><p dir="LTR"><strong>We also wish to note that the training program is free of charge, and no fees will be collected from participants during registration or participation in the training program.</strong></p><p dir="LTR">&nbsp;</p><p dir="LTR">&nbsp;</p><p dir="LTR">&nbsp;</p>

<p>&nbsp;</p><p><strong>Specialized Training Opportunity in Aqaba City</strong></p><p><strong>Crane Operator Course</strong></p><p>Presented by the Water Efficiency and Public Expenditure (WEC) project, supported by the United States Government.</p><p>&nbsp;</p><p><strong>Do you work in the field of crane operations within industrial and infrastructure projects?</strong></p><p>We invite you to register for a <strong>specialized training program for crane operators</strong>, which combines theoretical foundations with practical application. The goal is to develop the efficiency of crane operators in the areas of crane control systems, load dynamics, and reading and applying load charts within the industrial sector and infrastructure projects, in accordance with the best safety practices and professional requirements accredited by the Lifting Equipment Engineers Association (LEEA), based in the United Kingdom.</p><p>&nbsp;</p><p><strong><u>About the Program</u></strong></p><p>A specialized training program spanning <strong>six days for a total of 42 training hours</strong>, with seven training hours per day, combining theoretical knowledge and practical applications.</p><p>The program focuses on enhancing safe crane operation skills, proper handling of loads during lifting operations, and improving coordination and communication between operators and lifting teams, ensuring compliance with safety requirements, operational discipline, and reducing risks associated with lifting operations in industrial work sites.</p><p>&nbsp;</p><p><strong><u>Target Audience and Enrollment Requirements</u></strong></p><p><strong>The program primarily targets:</strong></p><ul><li>Workers within lifting teams, industrial projects, and infrastructure projects.</li><li>Previous experience (more than two years) in crane operation within the industrial sector or infrastructure projects.</li><li>Individuals whose nature of work requires developing their practical competence and obtaining a certificate according to LEEA requirements.</li><li>Applicants must be of Jordanian nationality.</li><li>Must be at least 18 years old.</li><li>Must be in good health and of good conduct.</li><li>Must be ready and able to commit to attending the entire training program in Aqaba city.</li></ul><p>&nbsp;</p><p><strong><u>Program Duration</u></strong></p><p>Six days – 42 training hours</p><p>Seven training hours per day</p><p>Location: Aqaba City</p><p>Training Date: During the month of November (from Saturday, November 14th to Thursday, November 19th, 2026)</p><p>&nbsp;</p><p><strong><u>Required Documents Upon Selection</u></strong></p><p>Selected participants will be required to provide:</p><ul><li>A copy of their national ID.</li><li>A valid certificate of good conduct.</li><li>Any previous relevant training or professional certificates.</li></ul><p>&nbsp;</p><p><strong><u>Evaluation and Certification</u></strong></p><p>The program includes a practical evaluation and a final exam in accordance with LEEA requirements.</p><p>Program and certification procedures will be completed according to the accrediting body's requirements and the conditions for passing the evaluation and exam.</p><p>&nbsp;</p><p><strong><u>Registration</u></strong></p><p>Those wishing to participate in the training program must apply via the Akhtaboot website and fill out the <strong>electronic training application form</strong> through the following link:</p><p><a href="https://iwd-jo.com/">https://iwd-jo.com/</a></p><p><strong>Please note that the deadline for receiving applications is <u>October 19, 2026</u>.</strong></p><p><strong>Spaces are limited and participation will be confirmed based on the admission criteria explained above.</strong></p><p><strong>We would also like to note that the training program is free of charge, and no fees will be collected from participants during registration or participation in the training program.</strong></p><p>&nbsp;</p>

<p dir="LTR">&nbsp;</p><p dir="LTR"><strong>Specialized Training Opportunity in Aqaba City</strong></p><p dir="LTR"><strong>Heavy Equipment Rigger Training Course</strong></p><p dir="LTR">Presented by the Water Efficiency and Climate (WEC) project with support from the United States Government</p><p dir="LTR"><strong>Do you work in the field of rigging and signaling for heavy equipment within industrial and infrastructure projects?</strong></p><p dir="LTR">We invite you to register for a <strong>specialized training program to develop the competence of heavy equipment riggers</strong>, combining theoretical foundations with practical application. The goal is to enhance the proficiency of riggers, with a focus on lifting loads exceeding 50 tons, using tagline ropes, determining the center of gravity, and conducting rigging inspections to ensure the safety of lifting equipment and tools within the industrial and infrastructure sectors according to the best safety practices and professional requirements accredited by the <strong>Lifting Equipment Engineers Association (LEEA)</strong>, based in the United Kingdom.</p><p dir="LTR"><strong><u>About the Program</u></strong></p><p dir="LTR">A specialized training program spanning <strong>six days for a total of 42 training hours</strong>, with seven training hours per day, combining theoretical knowledge and practical applications.</p><p dir="LTR">The program focuses on enhancing skills for the safe planning and execution of heavy load lifting operations, effective coordination with crane operators and rigging teams, and commitment to safety procedures and operational discipline, thereby contributing to increased efficiency in handling and lifting operations and reducing risks at industrial work sites.</p><p dir="LTR"><strong><u>Target Audience and Eligibility Requirements</u></strong></p><p dir="LTR"><strong>The program primarily targets:</strong></p><ul><li dir="LTR">Individuals working within rigging teams, industrial projects, and infrastructure projects.</li><li dir="LTR">Previous experience (more than 5 years) in rigging, preparing, and signaling for heavy equipment or loads within the industrial sector or infrastructure projects.</li><li dir="LTR">Individuals whose work nature requires developing their practical competence and obtaining a certificate according to LEEA requirements.</li><li dir="LTR">Applicants must be of Jordanian nationality.</li><li dir="LTR">Minimum age of 18 years.</li><li dir="LTR">Must be medically fit and of good conduct.</li><li dir="LTR">Must be prepared and able to commit to attending the entire training program in Aqaba City.</li></ul><p dir="LTR"><strong><u>Program Duration</u></strong></p><p dir="LTR">Six days – 42 training hours</p><p dir="LTR">Seven training hours per day</p><p dir="LTR">Location: Aqaba City</p><p dir="LTR">Training Dates: During the month of December (from Saturday, December 5th to Thursday, December 10th, 2026)</p><p dir="LTR"><strong><u>Required Documents upon Selection</u></strong></p><p dir="LTR">Selected participants will be required to provide:</p><ul><li dir="LTR">A copy of their national ID.</li><li dir="LTR">A valid certificate of good conduct.</li><li dir="LTR">Any relevant previous training or professional certificates.</li></ul><p dir="LTR"><strong><u>Assessment and Certification</u></strong></p><p dir="LTR">The program includes a practical assessment and a final exam in accordance with LEEA requirements.</p><p dir="LTR">Program procedures and certification will be completed according to the accrediting body's requirements and the conditions for passing the assessment and exam.</p><p dir="LTR"><strong><u>Registration</u></strong></p><p dir="LTR">Those wishing to participate in the training program must apply via the Akhtaboot website and complete the <strong>electronic training application form</strong> through the following link:</p><p dir="LTR"><a href="https://iwd-jo.com/">https://iwd-jo.com/</a></p><p dir="LTR"><strong>Please note that the deadline for receiving applications is <u>November 2, 2026</u>.</strong></p><p dir="LTR"><strong>Spaces are limited, and participation will be confirmed based on the admission criteria outlined above.</strong></p><p dir="LTR"><strong>We would also like to note that the training program is free of charge, and no fees will be collected from participants during registration or participation in the training program.</strong></p><p dir="LTR">&nbsp;</p>

<p dir="LTR" style="margin-left:-4.5pt;"><strong>Training Opportunity in Precision Metal Grinding:</strong> <strong>Aqaba, October 17, 2026</strong></p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Training Program Title: Grinding Technician</strong></p><p dir="LTR" style="margin-left:-4.5pt;">The Water Governance Activity (WGA) project, sponsored by the United States government, will hold a specialized training program in metal grinding. The program aims to develop trainees' skills in the safe and precise use of grinding tools and equipment, equipment maintenance, and executing finishing work in accordance with quality requirements in the industrial sector.</p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;">The program offers beginners and workers with limited experience the opportunity for practical and theoretical training on selecting appropriate grinding discs, operating tools, performing basic inspections and maintenance, and executing precision grinding while paying attention to details, the effect of heat on metal, and the properties of different materials.</p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;">The Water Governance Activity project will cover the costs of conducting this program (accommodation and transportation are not included), at the Gulf Engineering Testing Est. (GETE) facilities in Aqaba, starting October 17, 2026, consisting of 42 training hours (7 days).</p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Program Objective:</strong></p><p dir="LTR" style="margin-left:-4.5pt;">In cooperation with Gulf Engineering Testing Est., the program aims to prepare a grinding technician capable of safely setting up and operating grinding tools, selecting the appropriate disc for the material and the required work, removing excess material and burrs, preparing edges, and finishing surfaces precisely, while controlling heat and maintaining part dimensions and surface quality.</p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Enrollment Requirements:</strong></p><ul><li dir="LTR">Applicants must be Jordanian citizens.</li><li dir="LTR">Must be at least 18 years old.</li><li dir="LTR">The program is suitable for beginners; those with up to one year of practical experience in grinding, metal workshops, or related industrial work are also eligible.</li><li dir="LTR">Initial knowledge of using hand tools or working in a workshop environment is preferred, but no specialized professional certificate is required.</li><li dir="LTR">Submit proof of practical experience if available.</li><li dir="LTR">Must be in good health and of good conduct.</li><li dir="LTR">Commitment to occupational safety requirements and technical instructions.</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Program Content:</strong></p><ul><li dir="LTR">Basics of occupational safety in grinding work, and risks of sparks, noise, dust, flying particles, and disc breakage.</li><li dir="LTR">Identifying types of grinding tools and discs and their uses, inspecting equipment before operation, and performing basic maintenance and cleaning.</li><li dir="LTR">Practical training on precision grinding, removing excess material and burrs, preparing edges, and finishing surfaces while maintaining dimensions.</li><li dir="LTR">Understanding the effect of heat on metal during grinding, choosing the appropriate work method for material properties, and applying quality and safety requirements.</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Program Stages:</strong></p><ul><li dir="LTR">Review and evaluation of applications and resumes.</li><li dir="LTR">Conducting an initial assessment to determine applicants' levels and the suitability of the training program for them, through personal interviews or a simple practical test if necessary.</li><li dir="LTR">Implementation of practical and theoretical training by instructors who are specialists in grinding and metal machining.</li><li dir="LTR">Conducting a practical assessment to measure the trainee's ability to select the appropriate tool and disc, operate equipment safely, and execute grinding and finishing work accurately.</li><li dir="LTR">Awarding a certificate of completion to trainees who meet attendance requirements and pass the final assessment.</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Program Location and Duration:</strong></p><ul><li dir="LTR">Location: Aqaba Governorate, at the facilities of Gulf Engineering Testing Est.</li><li dir="LTR">Program Start Date: October 17, 2026.</li><li dir="LTR">Program Duration: 42 training hours (7 days).</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Required Documents:</strong></p><p dir="LTR" style="margin-left:-4.5pt;">Please attach the following documents when filling out the application form:</p><ul><li dir="LTR">Resume (CV)</li><li dir="LTR">Copy of a valid national ID</li><li dir="LTR">Certificate of educational qualification (if available)</li><li dir="LTR">Accreditation and/or professional practice certificates (if available)</li><li dir="LTR">Experience certificates (if available)</li><li dir="LTR">A recently issued non-criminal record certificate</li></ul><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p style="margin-left:.25in;"><strong>Application Steps</strong></p><p dir="LTR">Those wishing to apply for the program must adhere to the following <strong>three steps in order</strong>:</p><ol><li dir="LTR"><strong>Step One – Apply via Akhtaboot</strong></li></ol><p dir="LTR"><strong>Please apply for the training opportunity through the Akhtaboot platform and attach your resume (CV) with the job application.</strong></p><ol><li dir="LTR" value="2"><strong>Step Two – Fill out the Training Application Form</strong></li></ol><p dir="LTR">After applying via Akhtaboot, please fill out the <strong>Electronic Training Application Form</strong> through the following link:</p><p dir="LTR" style="margin-left:-4.5pt;"><a href="https://ncpmu-skills.com/opportunities/16?lang=ar">https://ncpmu-skills.com/opportunities/16?lang=ar</a></p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p><p dir="LTR" style="margin-left:-4.5pt;"><strong>Please note that the deadline for receiving applications is Thursday, October 8, 2026.</strong></p><p dir="LTR" style="margin-left:-4.5pt;">&nbsp;</p>

About the Job <br> <br> <p style=""> As an Application Security Engineer at Aspire, you will play a key role in identifying, validating, and remediating application and API vulnerabilities across our digital platforms. You will investigate findings from security assessment tools such as Wiz, Qualys, Snyk, and SonarQube, manually validate potential exploits, assess business impact, and collaborate closely with development teams to implement effective security fixes. <br> </p><p style="">You will lead application security testing initiatives, manage SAST and DAST programs, conduct secure code reviews, and evaluate how AWS configurations impact application security. Working in a hands-on, security-focused environment, you will help reduce security risks, improve secure development practices, and ensure vulnerabilities are accurately prioritized and remediated. You will also contribute to threat modeling, security automation, and continuous improvement of application security processes. <br> <br> What you'll do <br> </p><ul style=""><span style="font-weight: bold;"><span style="font-weight: bold;"><span style="font-weight: normal;"> </span><li style=""><span style="font-weight: normal;"> Triage and validate security findings from Wiz, Qualys, and automated or AI-driven penetration testing tools by reproducing exploits and identifying false positives. <br> </span></li><li style=""><span style="font-weight: normal;"> Assess vulnerabilities based on exploitability, business impact, data exposure, and overall risk, and track remediation through closure. <br> </span></li><li style=""><span style="font-weight: normal;"> Provide clear, actionable remediation guidance, including code-level recommendations, and review developer fixes to ensure vulnerabilities are fully resolved. <br> </span></li><li style=""><span style="font-weight: normal;"> Identify recurring vulnerability patterns and recommend root-cause solutions, including shared authorization libraries, secure coding standards, and secure-by-default configurations. <br> </span></li><li style=""><span style="font-weight: normal;"> Perform manual security testing of web applications and APIs, focusing on authentication, authorization, BOLA/IDOR, privilege escalation, session management, injection, and business logic flaws. <br> </span></li><li style=""><span style="font-weight: normal;"> Test REST and GraphQL APIs to identify access control weaknesses, authorization bypasses, and other OWASP API Security Top 10 vulnerabilities. <br> </span></li><li style=""><span style="font-weight: normal;"> Investigate shadow and undocumented APIs discovered by security tools and assess their exposure and associated risks. <br> </span></li><li style=""><span style="font-weight: normal;"> Conduct secure code reviews and threat modeling for new application features, APIs, and integrations. <br> </span></li><li style=""><span style="font-weight: normal;"> Manage and optimize SAST and DAST programs using Snyk, SonarQube, and Qualys Web Application Scanning (WAS), including custom rules, quality gates, scan configurations, and false-positive reduction. <br> </span></li><li style=""><span style="font-weight: normal;"> Configure and maintain authenticated DAST scans against web applications and APIs, ensuring meaningful coverage of application functionality and security controls. <br> </span></li><li style=""><span style="font-weight: normal;"> Correlate findings from Snyk, SonarQube, Qualys, and Wiz to identify vulnerabilities present in source code and exploitable in production environments. <br> </span></li><li style=""><span style="font-weight: normal;"> Integrate security testing into development workflows and CI/CD pipelines, establishing appropriate severity thresholds and security quality gates. <br> </span></li><li style=""><span style="font-weight: normal;"> Assess AWS configurations affecting application security, including IAM roles and policies, S3 bucket exposure, API Gateway, Lambda permissions, and secrets management. <br> </span></li><li style=""><span style="font-weight: normal;"> Validate cloud-to-application attack paths identified by Wiz, including scenarios where vulnerable applications operate with excessive AWS permissions. <br> </span></li><li style=""><span style="font-weight: normal;"> Review AWS WAF rules and recommend protective measures against identified application vulnerabilities and attack patterns. <br> </span></li><li style=""><span style="font-weight: normal;"> Use AWS Security Hub, GuardDuty, and Inspector findings to support vulnerability investigations, risk prioritization, and remediation efforts. <br> </span></li><li style=""><span style="font-weight: normal;"> Track vulnerability trends, remediation SLAs, and application security posture, providing clear reports and recommendations to engineering and security leadership. <br> </span></li><li style=""><span style="font-weight: normal;"> Collaborate with development, cloud, and security teams to strengthen application security practices and continuously improve vulnerability management processes. <br></span><span style="font-weight: bold;"><ul style=""><li style=""><br> </li></ul></span></li></span></span></ul><p><strong>Desired Candidate Profile</strong></p>What you'll need <br> <ul style=""> <li style=""> Bachelor degree in Information Security, Computer Science, Software Engineering, or a related field, or equivalent practical experience. <br> </li><li style=""> 5+ years of hands-on experience in application security, penetration testing, or vulnerability research. <br> </li><li style=""> Proven experience identifying and exploiting business logic flaws and access control vulnerabilities in REST and GraphQL APIs. <br> </li><li style=""> Deep understanding of the OWASP Top 10 and OWASP API Security Top 10, including authentication, authorization, injection, and business logic vulnerabilities. <br> </li><li style=""> Strong proficiency with manual application security testing tools, particularly Burp Suite Professional, including request manipulation and custom test case development. <br> </li><li style=""> Hands-on experience operating, configuring, and tuning SAST and DAST tools such as Snyk, SonarQube, and Qualys, including vulnerability triage and false-positive reduction. <br> </li><li style=""> Ability to read, analyze, and review application code in at least one modern programming language, such as Python, Java, Go, or JavaScript/TypeScript. <br> </li><li style=""> Working knowledge of AWS security services and configurations, particularly IAM, S3, Lambda, and API Gateway, and their impact on application security <br> </li><li style=""> Experience with Wiz, Qualys, or comparable cloud security posture management (CNAPP) and vulnerability management platforms, with the ability to turn automated scan results into validated, prioritized security findings. <br> </li><li style=""> Experience integrating security testing into development workflows and collaborating with developers to implement secure coding practices. <br> </li><li style=""> Strong understanding of vulnerability assessment, exploit validation, risk-based prioritization, and remediation lifecycle management. <br> </li><li style=""> Excellent analytical and problem-solving skills, with the ability to distinguish exploitable vulnerabilities from scanner noise. <br> </li><li style=""> Hands-on experience with SOAR platforms, including building playbooks and integrations to automate vulnerability management workflows. <br> </li><li style=""> Experience with automated or AI-assisted penetration testing and continuous DAST platforms. <br> </li><li style=""> Experience developing custom security rules and quality profiles in SonarQube or Snyk. <br> </li><li style=""> AWS Certified Security u2013 Specialty certification. <br> </li><li style=""> Offensive security certifications such as OSCP, OSWE, BSCP, or GWAPT. <br> </li><li style=""> Participation in bug bounty programs or experience publishing vulnerability research. <br> </li><li style=""> Strong written and verbal communication skills, particularly in preparing developer-focused remediation guidance and security reports for leadership. <br> </li><li style=""> Ability to influence development teams, drive remediation without direct authority, and work independently in a fast-paced, remote environment. <br> </li><li style=""> Awareness or knowledge of IT security best practices as defined by ISO/SOC or similar. <br> </li></ul>

<p>Perform in-process and final inspections of manufactured cans and components according to established quality control plans and procedures.</p><p>Utilize various measuring instruments and gauges (e.g., micrometers, height gauges, vision systems) to verify dimensions, tolerances, and surface finishes.</p><p>Identify and document non-conforming products, including detailed descriptions of defects, root causes, and corrective actions taken.</p><p>Interpret engineering drawings, specifications, and quality standards to ensure accurate inspection criteria.</p><p>Conduct visual inspections for defects such as dents, scratches, misprints, and material flaws.</p><p>Maintain accurate and organized inspection records, including inspection reports, defect logs, and calibration records.</p><p>Collaborate with production personnel and engineers to address quality issues and implement continuous improvement initiatives.</p><p>Assist in the investigation of customer complaints related to product quality.</p><p>Operate and maintain quality control equipment and ensure its proper calibration.</p><p>Adhere to all safety regulations and company policies.</p><p><strong>Desired Candidate Profile</strong></p><p>Bachelor's degree in Industrial or Chemical Engineering or equivalent; a technical certificate or associate's degree in a relevant field is a plus.</p><p>Minimum of 2-4 years of experience as a Quality Inspector in a manufacturing environment, preferably in can manufacturing or a similar high-volume production setting.</p><p>Proficient in reading and interpreting engineering drawings, blueprints, and technical specifications.</p><p>Strong understanding of quality control principles and methodologies (e.g., SPC, 5S, Lean Manufacturing).</p><p>Experience using a variety of precision measuring instruments and gauges.</p><p>Excellent attention to detail and strong analytical skills.</p><p>Ability to identify and document defects accurately.</p><p>Good communication and interpersonal skills to collaborate effectively with cross-functional teams.</p><p>Basic computer proficiency (e.g., Microsoft Office, SAP system).</p><p>Ability to work independently and as part of a team in a fast-paced environment.</p><p>Willingness to work shifts, weekends, and holidays as required by production schedules.</p><p>Physical ability to stand for extended periods and perform repetitive tasks.</p>

<p><strong>Responsibilities:</strong> To oversee and manage all security operations within the hotel, ensuring the safety and security of guests, Heartists, visitors, hotel assets, and property. The Security Manager is responsible for maintaining a safe environment, implementing security procedures, managing the Security team, and ensuring compliance with hotel, Accor, and applicable legal requirements.</p><p><strong>Security Operations</strong></p><ul><li>Oversee and manage the daily operations of the Security Department, ensuring effective security coverage across all hotel areas, including guest areas, back-of-house areas, entrances, parking areas, and other critical locations.</li><li>Ensure the safety and security of guests, Heartists, visitors, contractors, hotel assets, and property.</li><li>Conduct regular security inspections and patrols to identify, prevent, and address potential security risks.</li><li>Ensure proper implementation of access control, visitor management, and other security procedures.</li><li>Monitor CCTV and other security systems, ensuring appropriate and timely responses to identified incidents.</li><li>Ensure all security equipment and systems are properly maintained and operational.</li><li>Respond promptly and professionally to guest and Heartist security concerns.</li><li>Handle sensitive and confidential security matters with discretion.</li></ul><p><strong>Team Leadership &amp; Performance</strong></p><ul><li>Lead, supervise, and motivate the Security team, ensuring professional performance and adherence to departmental standards.</li><li>Monitor team performance, attendance, discipline, and compliance with security procedures.</li><li>Provide regular briefings, coaching, and guidance to Security Heartists.</li><li>Participate in training sessions provided by the hotel's People &amp; Culture Department.</li><li>Ensure the Security Department maintains the required service and operational standards reflected in Heartist engagement and colleague surveys.</li></ul><p><strong>Emergency, Crisis &amp; Incident Management</strong></p><ul><li>Lead the hotel's response to security incidents, emergencies, and crisis situations.</li><li>Thoroughly understand and maintain all emergency response plans, crisis management plans, and required immediate actions.</li><li>Develop, implement, and continuously review training related to Fire &amp; Evacuation Response Plans, including practical firefighting exercises.</li><li>Develop and maintain appropriate emergency response procedures and contingency plans.</li><li>Ensure all incidents are properly investigated, documented, and reported to management.</li></ul><p><strong>Government &amp; Regulatory Compliance</strong></p><ul><li>Liaise with government authorities, police, Civil Defense, and other relevant authorities when required.</li><li>Maintain up-to-date knowledge of applicable local security, safety, and regulatory requirements.</li><li>Ensure compliance with hotel, Accor, departmental, and applicable legal requirements.</li><li>Maintain and regularly review all Security Department Standard Operating Procedures (SOPs) and Local Standard Operating Procedures (LSOPs).</li></ul><p><strong>Risk Management &amp; Continuous Improvement</strong></p><ul><li>Conduct regular security risk assessments and recommend appropriate corrective and preventive measures.</li><li>Identify opportunities to improve security standards, procedures, and operations.</li><li>Submit written recommendations to management regarding the development and improvement of the Security Department.</li><li>Review security procedures regularly and ensure they remain effective and aligned with operational requirements.</li><li>Participate as a permanent member of the Health &amp; Safety Committee and attend relevant Health &amp; Safety meetings.</li></ul><p><strong>General Responsibilities</strong></p><ul><li>Follow all hotel and departmental policies and procedures.</li><li>Follow all applicable Health &amp; Safety, hygiene, and sanitation policies.</li><li>Maintain accurate security records, logs, reports, and documentation.</li><li>Perform any other duties and responsibilities as assigned by management.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li>Bachelor's degree or relevant diploma in Security Management, Law, Criminology, Law Enforcement, or a related field is preferred.</li><li>Minimum 3 years of Security experience, including at least 2 years in a Security Management or supervisory role.</li><li>Previous experience in a hotel environment is a must.</li><li>Strong knowledge of security procedures, risk management, emergency response, and crisis management.</li><li>Good knowledge of local security regulations and government authority requirements.</li><li>Good command of English is a must.</li><li>Occupational Health &amp; Safety certification is highly regarded.</li><li>Ability to work effectively in a multinational and multicultural environment.</li><li>Strong leadership, communication, decision-making, and problem-solving skills.</li><li>Ability to remain calm and effective under pressure and during emergency situations.</li><li>Fire Safety certification is preferred.</li><li>First Aid certification is preferred.</li></ul>

<p>The IT Security Officer will help protect the organization s systems and information by monitoring security events, identifying vulnerabilities, implementing security controls and responding to incidents.</p><p><strong>Desired Candidate Profile</strong></p><ul><li>SOC operations and daily SIEM alert investigation, preferably using Elastic Security. Experience with Splunk, QRadar or Microsoft Sentinel is also acceptable.</li><li>Practical experience with SIEM integration, including onboarding different log sources and developing, testing and tuning security use cases, correlation rules and alerts.</li><li>Practical threat intelligence experience using free or paid platforms to collect, validate and analyze indicators of compromise (IOCs) and supporting evidence.</li><li>EDR alert investigation, including process analysis, endpoint isolation, containment and false-positive identification.</li><li>Practical incident response for malware, phishing, unauthorized access and other security incidents.</li><li>Vulnerability assessment using Nessus, Tenable, Qualys or OpenVAS, including validating findings, prioritizing risks, following up remediation and retesting.</li><li>Hands-on network and web application penetration testing using Kali Linux, Nmap, Burp Suite, Metasploit or similar tools.</li><li>Windows and Linux security experience, including Windows Event Logs, Active Directory, PowerShell and Linux logs.</li><li>Practical security hardening for Active Directory, firewalls, Windows and Linux servers, with good experience applying CIS Benchmarks.</li><li>Good understanding of network security, firewalls, TCP/IP, DNS, VPNs and VLANs.</li><li>Ability to document security findings, prepare clear technical reports and provide practical remediation recommendations.</li><li>Hands-on experience investigating SIEM and EDR alerts and responding to security incidents.</li><li>Practical knowledge of vulnerability assessment, security hardening and remediation validation.</li><li>Ability to analyze threat intelligence, indicators of compromise and security logs.</li><li>Strong knowledge of network security, firewalls, IDS/IPS, TCP/IP, DNS, VPNs and VLANs.</li><li>Working knowledge of ISO/IEC 27001, risk assessment, security policies and audit requirements.</li><li>Strong analytical, problem-solving, documentation, and communication skills.</li><li>Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field.</li><li>Minimum of 2 years of practical experience in cybersecurity.</li><li>Expertise in conducting security assessments.</li><li>Proven ability to develop and implement security policies.</li><li>Experience managing security and data protection risk assessments.</li><li>Preferred certifications (not mandatory):</li><li>SOC and Incident Response: Elastic Certified SIEM Analyst, eSOC, eCIR, eCTHP, eCDFP, HTB CDSA, BTL1, CCDL1.</li><li>Advanced Defensive Security: BTL2 or CCDL2.</li><li>Penetration Testing: OSCP/OSCP+, eJPT, eCPPT, eWPTX, HTB CPTS/CWES, or CEH Practical.</li><li>GRC and ISO: ISO/IEC 27001 Lead Implementer/Lead Auditor, CISA, or COBIT 2019.</li></ul>

<p>Job Summary The Junior Cybersecurity Specialist will assist in maintaining and improving the company's cybersecurity posture by monitoring security systems, identifying potential vulnerabilities, supporting security assessments, and implementing cybersecurity best practices. The ideal candidate should have a strong interest in cybersecurity, basic technical knowledge, problem-solving skills, and a willingness to learn and grow within a dynamic technology environment.</p><h4>Key Responsibilities</h4><ul><li>Monitor company systems, networks, and applications for potential security threats and suspicious activities.</li><li>Assist in identifying, assessing, and reporting security vulnerabilities.</li><li>Support the implementation and maintenance of cybersecurity policies, procedures, and controls.</li><li>Conduct basic vulnerability assessments and security checks.</li><li>Assist in investigating security incidents and documenting findings.</li><li>Monitor access permissions and ensure appropriate user access across company systems.</li><li>Support endpoint security, antivirus, firewall, and email security management.</li><li>Assist with security awareness initiatives and educate employees on cybersecurity best practices.</li><li>Maintain security documentation, reports, and incident logs.</li><li>Stay up to date with emerging cybersecurity threats, vulnerabilities, and industry best practices.</li><li>Collaborate with the IT team to ensure systems and company data remain secure.</li></ul><p><strong>Desired Candidate Profile</strong></p><h4>Requirements and Qualifications</h4><ul><li>Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>0 2 years of experience in cybersecurity or IT support.</li><li>Basic understanding of networking concepts, operating systems, and information security principles.</li><li>Familiarity with common cybersecurity threats, vulnerabilities, and security practices.</li><li>Basic knowledge of firewalls, antivirus solutions, endpoint protection, and access management.</li><li>Familiarity with security tools such as Wireshark, Nmap, or SIEM platforms is an advantage.</li><li>Basic understanding of security frameworks and standards such as ISO 27001 and NIST is a plus.</li><li>Strong analytical, troubleshooting, and problem-solving skills.</li><li>Good communication skills and attention to detail.</li><li>Ability to work independently and collaboratively within a team.</li></ul><h4>Preferred Certifications</h4><ul><li>CompTIA Security+</li><li>CompTIA Network+</li><li>Certified in Cybersecurity (CC)</li><li>Microsoft Security certifications</li></ul>

<p>The Information Security Professional is responsible for overseeing day-to-day security controls, reviews and analyses the security incidents and vulnerability reports produced by the dedicated SOC and Vulnerability Assessment (VA) teams, makes sure every risk has an owner and is closed, and produces the evidence that shows ZainTECH is secure and compliant.This role provides the CISO Office review and analysis of their output and drives follow-up actions to closure.</p> <p>Responsibilities:</p> <p> Security Incident Review and Analysis </p> <ul> <li>Review incident reports and tickets raised by the SOC, ensuring appropriate classification, severity assessment, and handling in accordance with incident response policies and playbooks.</li> <li>Assess business impact, affected assets and data, and root causes, escalating significant incidents to the Senior Information Security Professional and CISO.</li> <li>Coordinate with IT Operations and system owners to follow up on agreed containment, recovery, and corrective actions, ensuring timely implementation and closure.</li> <li>Analyse incident trends and recurring patterns, recommending improvements to security controls, detection use cases, and SOC playbooks.</li> <li>Contribute to post-incident reviews and maintain the CISO Office incident register.</li> </ul> <p> Vulnerability Management and Assessment </p> <ul> <li>Review vulnerability assessment reports and scanning results from the VA team, ensuring appropriate coverage of endpoints, servers, network devices, applications, and cloud workloads.</li> <li>Analyse and prioritise vulnerability findings based on risk, asset criticality, exploitability, and available threat intelligence.</li> <li>Coordinate with asset owners to assign remediation activities, monitor progress against agreed timelines, and report overdue remediation items.</li> <li>Review penetration testing reports, validate the implementation of agreed remediation measures, and document risk exceptions where remediation is not feasible.</li> </ul> <p> Identity, Endpoint, Cloud, and Infrastructure Security </p> <ul> <li>Conduct periodic user access reviews for critical applications, privileged accounts, and third-party access, identifying gaps in privileged access management and multi-factor authentication coverage.</li> <li>Verify endpoint protection, encryption, and security hardening baselines, and review firewall, VPN, IDS, and IPS rules and network segmentation against approved security standards.</li> <li>Review the security posture of Microsoft 365, Azure, AWS, and other cloud environments using Cloud Security Posture Management (CSPM) tools.</li> <li>Assess security requirements for new systems, application onboarding, and infrastructure changes through the Change Advisory process.</li> <li>Support the investigation and follow-up of Data Loss Prevention (DLP) alerts.</li> </ul> <p> Governance, Risk, and Compliance </p> <ul> <li>Maintain assigned entries in the Information Security Risk Register and monitor the implementation of associated risk treatment plans.</li> <li>Collect, organise, and maintain security control evidence for ISO/IEC 27001 surveillance audits, internal audits, and client due diligence assessments.</li> <li>Support compliance with applicable regulatory frameworks, cybersecurity standards, and data protection laws across the organization's operating markets, including UAE Information Assurance Standards, Saudi NCA Essential Cybersecurity Controls, Kuwait CITRA requirements, Jordan Cybersecurity Law and Personal Data Protection Law, Egypt Personal Data Protection Law, India's Digital Personal Data Protection Act and CERT-In directions, and applicable UAE and KSA data protection regulations.</li> <li>Support security assessments of suppliers and business partners, ensuring appropriate security requirements and controls are evaluated.</li> <li>Prepare and coordinate responses to client and partner security questionnaires and due diligence requests.</li> </ul> <p> Data Privacy and Protection </p> <ul> <li>Support the development and maintenance of the Record of Processing Activities (ROPA) in coordination with process owners, documenting processing purposes, data categories, data subjects, legal bases, retention periods, recipients, and systems.</li> <li>Support Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA) for new or modified processing activities, systems, and suppliers, tracking agreed privacy controls through implementation.</li> <li>Maintain data inventories and data flow maps, including cross-border data transfers, ensuring alignment with the ROPA.</li> <li>Review the implementation of data protection controls, including data classification, minimisation, retention and disposal, consent management, access controls, and encryption.</li> <li>Support the handling of data subject rights requests, including access, correction, and deletion requests, ensuring compliance with applicable regulatory timelines.</li> <li>Coordinate with Legal and Data Protection teams to assess personal data breaches and gather relevant information for regulatory and individual notifications.</li> <li>Conduct privacy reviews of suppliers processing personal data, including reviewing data processing agreements and cross-border data transfer safeguards.</li> </ul> <p> Business Impact Analysis and Business Continuity </p> <ul> <li>Conduct Business Impact Analysis (BIA) workshops and interviews with business units to identify critical services, processes, supporting systems, and their dependencies on people, technology, and suppliers.</li> <li>Assess the potential impact of business disruptions over time and recommend Maximum Tolerable Period of Disruption (MTPD), Recovery Time Objectives (RTO), and Recovery Point Objectives (RPO) for critical services.</li> <li>Develop and maintain business continuity plans and recovery procedures for critical services in coordination with process owners, in alignment with ISO 22301.</li> <li>Support business continuity exercises and disaster recovery testing, document outcomes, and track improvement actions through to closure.</li> </ul> <p> Security Awareness </p> <ul> <li>Conduct phishing simulation campaigns and analyse results, providing reports and insights by business unit.</li> <li>Develop and deliver information security awareness content and short training sessions in English and Arabic, where applicable.</li> <li>Respond to employee information security queries through the designated security service desk channel.</li> </ul> <p><br></p><p><strong>Desired Candidate Profile</strong></p><ul><li>2 to 4 years of experience in information security, IT security, SOC, or a related technical role, including reading and analysing security incident and vulnerability assessment reports.</li><li>Familiarity with ISO/IEC 27001:2022, NIST CSF 2.0, CIS Controls, and ITIL <br>incident and change management.</li><li>Working knowledge of data privacy and protection principles and controls, and of the personal data protection laws in ZainTECH's markets.</li><li>Understanding of business impact analysis and business continuity concepts, including RTO and RPO.</li><li>Experience in the GCC or wider Middle East region, or in a telecom or technology organisation</li><li>Fluency in English and Arabic is mandatory.</li><li>Bachelor's degree in information security, computer science, information technology, or a related field.</li><li>At least one of CompTIA Security+, CompTIA CySA+, EC-Council CEH, GIAC, GSEC, or Microsoft SC-200.</li><li>Cloud security certifications such as AZ-500 or AWS Security Specialty, and network certifications such as Cisco CCNA, Fortinet NSE, or Palo Alto PCNSA.</li><li>ITIL Foundation certification, ISO 22301 Foundation or Lead Implementer, or a privacy certification such as IAPP CIPT or ISACA CDPSE.</li></ul>

<p>Responsibilities:</p> <p> Security Incident Oversight and Analysis </p> <ul> <li>Review and analyse major and complex security incidents reported by the SOC, providing the CISO with independent assessments of business impact, root causes, and residual risks.</li> <li>Represent the CISO Office in major incident response calls, providing advice on business impact, regulatory notification requirements, and stakeholder communications.</li> <li>Maintain and oversee the Incident Response Policy, ensuring its effectiveness through tabletop exercises conducted at least twice annually in collaboration with the SOC, IT, Legal, Communications, and leadership teams.</li> <li>Monitor SOC performance against agreed Service Level Agreements (SLAs) and assess security detection coverage against the MITRE ATT&amp;CK framework in coordination with the SOC team.</li> <li>Analyse security incident trends and relevant threat intelligence across the telecommunications, technology, and government sectors, recommending improvements to security controls and response capabilities.</li> </ul> <p> Vulnerability Management and Oversight </p> <ul> <li>Define and maintain the Vulnerability Management Policy, including remediation SLAs, risk-based prioritisation criteria, and vulnerability exception handling procedures.</li> <li>Review and critically assess vulnerability assessment and penetration testing reports, challenging findings where necessary and validating the scope and coverage of critical assets.</li> <li>Coordinate with asset owners to establish remediation priorities and escalate overdue critical and high-risk vulnerabilities to leadership.</li> <li>Evaluate and recommend risk exceptions where remediation is not feasible, ensuring appropriate risk assessment and approval.</li> <li>Analyse external attack surface assessments covering domains, certificates, leaked credentials, and shadow IT to identify and address potential security exposures.</li> </ul> <p> Security Architecture and Cloud Security </p> <ul> <li>Review security architecture and designs for new applications, cloud services, integrations, and AI solutions prior to implementation and go-live.</li> <li>Define and maintain security hardening baselines for endpoints, servers, network devices, and cloud environments.</li> <li>Lead cloud security posture management across Microsoft 365, Azure, AWS, and other cloud platforms used by the organisation.</li> <li>Provide technical guidance on identity architecture, Zero Trust principles, privileged access management, and Data Loss Prevention (DLP) controls.</li> </ul> <p> Governance, Risk, and Compliance </p> <ul> <li>Lead information security risk assessments and maintain the Information Security Risk Register, ensuring clear risk ownership, treatment plans, and remediation tracking.</li> <li>Coordinate ISO/IEC 27001 certification and surveillance audits, internal audits, and the remediation of identified nonconformities.</li> <li>Develop and maintain regulatory control matrices and oversee compliance with applicable cybersecurity and data protection requirements across ZainTECH's operating markets and delivery locations, including UAE Information Assurance Standards and Cyber Security Council guidance, Saudi NCA Essential Cybersecurity Controls (ECC) and Critical Systems Cybersecurity Controls (CCC), Kuwait CITRA requirements, Jordan Cybersecurity Law and Personal Data Protection Law, Egypt Personal Data Protection Law, India's Digital Personal Data Protection Act and CERT-In directions, and applicable UAE and KSA data protection regulations.</li> <li>Develop, review, and maintain information security policies, standards, and procedures, ensuring effective governance and management of policy exceptions.</li> <li>Lead security assessments of critical suppliers and third-party service providers, coordinate responses to client due diligence questionnaires, and support SOC 2 and other assurance reporting requirements where applicable.</li> </ul> <p> Data Privacy and Protection </p> <ul> <li>Lead the development and maintenance of the Record of Processing Activities (ROPA) across business units in coordination with the Data Protection function, ensuring periodic reviews at least annually and following significant changes.</li> <li>Lead and review Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA) for high-risk processing activities, new systems, AI use cases, and suppliers, recommending appropriate controls to mitigate privacy risks.</li> <li>Embed Privacy by Design and Privacy by Default principles into security architecture reviews, change approval processes, and supplier onboarding activities.</li> <li>Define data protection standards covering classification, handling, retention, and disposal, alongside security controls for protecting personal data, including encryption, masking, pseudonymisation, and Data Loss Prevention (DLP).</li> <li>Assess cross-border data transfers against applicable regulatory requirements and recommend appropriate safeguards, including contractual clauses and Transfer Impact Assessments.</li> <li>Oversee data subject rights processes in coordination with Legal and Data Protection, ensuring requests are handled within applicable regulatory timelines.</li> <li>Lead the security aspects of personal data breach assessments and support regulatory and individual notifications within the timelines established by applicable data protection laws.</li> <li>Monitor privacy control compliance, report identified gaps and remediation actions to the CISO and Data Protection function, and contribute to privacy awareness and training initiatives.</li> </ul> <p> Business Impact Analysis and Business Continuity </p> <ul> <li>Lead the annual Business Impact Analysis (BIA) across business units to identify critical services, processes, systems, and their dependencies on people, technology, and suppliers, presenting findings to the CISO and leadership.</li> <li><br></li></ul><ul> </ul><p><strong>Desired Candidate Profile</strong></p><ul><li>6 9 years of information security experience within at least 8 years of overall ICT experience, including a minimum of 2 years in a senior or leadership role. Experience should include analysing major security incidents, overseeing vulnerability management and SOC service performance, and supporting ISO/IEC 27001 certification.</li><li>Strong knowledge of ISO/IEC 27001:2022, NIST Cybersecurity Framework (CSF) 2.0, CIS Controls, and MITRE ATT&amp;CK, with working knowledge of applicable regional cybersecurity and regulatory requirements.</li><li>Strong understanding of data privacy principles, data protection controls, and applicable personal data protection laws across ZainTECH's operating markets and delivery locations.</li><li>Demonstrated experience leading Business Impact Analysis (BIA) activities and developing business continuity plans.</li><li>Experience working with GCC or wider Middle Eastern regulatory authorities, preferably within the telecommunications, technology, or financial services sectors.</li><li>Fluency in English and Arabic is mandatory.</li><li>Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field.</li><li>At least one valid professional certification from CISSP, CISM, GIAC GCIH, GIAC GCIA, or OSCP.</li><li>Additional professional certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or CRISC.</li><li>Cloud security certifications such as CCSP, Microsoft Azure Security Engineer Associate (AZ-500), or AWS Certified Security Specialty.</li><li>Business continuity certifications such as ISO 22301 Lead Implementer or Lead Auditor, or Certified Business Continuity Professional (CBCP).</li><li>Data privacy certifications such as IAPP CIPP/E, CIPM, CIPT, or ISACA CDPSE.</li></ul>

<p>Result of Service The Senior Military Expert will deliver three (3) qualitative assessment and/or options papers on military and security developments within a six (6) month period to inform the mediation efforts of the Special Envoy and advance OSESGY engagement on the security track. Additionally, S/He will also deliver periodic military and security assessments and analytical products as requested by the Special Envoy.</p><p>Work Location Amman Expected duration 06 months</p><h2>Duties and Responsibilities</h2><p>Output 1: Development of new approaches in the security track</p><ul><li>Strategic Military and Security Advice - Produce briefing notes, advisory papers, and recommendations for the Special Envoy and senior Mission leadership on military and security matters and their implications for mandate implementation.</li><li>Analytical Reports - Deliver analytical reports and issue-based assessments on military and security developments to support the Special Envoy's good offices, engagement efforts, and strategic decision-making.</li><li>Scenario Development and Risk Analysis - Develop military and security scenario papers, risk assessments, and forecasting products to inform mediation strategies and planning processes.</li></ul><p>Output 2: Technical Advice</p><ul><li>Military Coordination Committee Advisory Products - Produce technical assessments, briefing materials, and recommendations to advise the Special Envoy and support the Head of the Security Arrangements team with the engagement with the Military Coordination Committee and the Redeployment Coordination Committee.</li><li>Stakeholder Consultation and Verification Reports - Produce briefing packages with advise and analysis of senior Yemeni and Regional stakeholders to inform SE/OSESGY security-track related consultations and prepare analytical reports and recommendations following SE/OSESGY consultations.</li><li>Ceasefire Planning Support - Deliver technical advice, options papers, and analytical products on military aspects of ceasefire planning, implementation, monitoring, and related confidence-building measures.</li></ul><p><strong>Desired Candidate Profile</strong></p><p>Qualifications/special skills Advanced university degree (Master's degree or equivalent) in political science, international relations, international economics, security, war college graduate or related field. A first-level university degree in combination with additional two years of qualifying experience may be accepted in lieu of the advanced university degree. A minimum of fifteen (15) years of progressively responsible professional experience in political affairs, international relations, defense, security, conflict resolution, disarmament, programme management, mediation support, or related fields is required. Relevant experience should include service at battalion command level (or equivalent) and above, as well as experience as a senior military adviser, military expert, or in a comparable strategic military advisory capacity. Experience related to the conflict in Yemen is desirable. Established professional engagement with senior military and security officials in the Gulf region is desirable.</p><p>Languages English and French are the working languages of the United Nations Secretariat. For the position advertised, fluency in English is required, knowledge of Arabic is desirable.</p><p>Additional Information This C/IC assignment is for a minimum of 6 and designed to be in-person and full-time.</p>