IT Security

Job Description

Role Purpose:

To implement and continuously enhance endpoint and cloud security controls across hybrid environments ensuring protection of devices, data, and digital assets through proactive defense, compliance alignment, and operational excellence. The role strengthens Bupa Arabia’s security posture by managing Microsoft Defender, Intune, Azure Arc, and Purview frameworks, and driving continuous improvement across enterprise-wide protection domains.

Key Accountabilities:

1-Endpoint Security & Management:

• Deploy, configure, and manage Microsoft Defender for Endpoint.
• Administer Microsoft Intune for device compliance, application protection, and MDM/MAM.
• Ensure patch and vulnerability management compliance.

2-Cloud & Hybrid Security:

• Integrate and secure hybrid/multi-cloud resources using Azure Arc.
• Monitor and respond to security alerts across Azure and on-premises assets.
• Manage and configure Azure IaaS security controls.

3-Data Protection & Compliance:

• Implement Microsoft Purview DLP and information protection policies across endpoints, email, and cloud.
• Classify and govern sensitive data in alignment with regulatory standards.
• Coordinate with GRC on compliance monitoring.

4-Governance, Access & Risk Management:

• Conduct periodic access reviews and enforce least privilege principles.
• Perform configuration audits, remediation, and continuous improvement of security baselines.
• Support vulnerability and risk assessments.

5-Documentation, Reporting & Audit Readiness:

• Maintain up-to-date documentation for policies, configurations, and controls.
• Generate reports on endpoint, cloud, and compliance posture.
• Support internal and external audit readiness.

6-Collaboration & Continuous Improvement:

• Partner with Cloud, Infrastructure, and Application teams to embed security-by-design practices.
• Contribute to automation, playbooks, and process enhancements.
• Share lessons learned to strengthen operational excellence.

Skills

• Proficiency in Microsoft Defender for Endpoint, Intune, Azure Arc, and Purview.
• Strong understanding of DLP, IAM, and hybrid security architectures.
• Experience with ISO 27001 and SAMA Cybersecurity frameworks.
• Strong analytical, troubleshooting, and reporting skills.