Senior Security Analyst

What we do:

GMG is a global well-being company retailing, distributing and manufacturing a portfolio of leading international and home-grown brands across sport, everyday goods, health and beauty, properties and logistics sectors. Under the ownership and management of the Baker family for over 45 years, GMG is a valued partner of choice for the world's most successful and respected brands in the well-being sector. Working across the Middle East, North Africa, and Asia, GMG has introduced more than 120 brands across 12 countries. These include notable home-grown brands such as Sun & Sand Sports, Dropkick, Supercare Pharmacy, Farm Fresh, Klassic, and international brands like Nike, Columbia, Converse, Timberland, Vans, Mama Sita's, and McCain.

What will you do:

The Senior Security Analyst – L2 is responsible for Cybersecurity Oversight, Delivery, Analysis, and Incident Management. The role supports strategic and technical initiatives, operational activities related to security tools and technologies, and contributes to security posture management. The analyst will participate in new security projects and initiatives, with a strong focus on innovation, creativity, and exceptional customer service.

This role specializes in Data Protection, Identity Protection, including hands-on experience in Access Review Processes, Privileged Access Management (PAM), Identity Protection (IDP), and broader Access Management.

Responsibilities:

• Coordinate and collaborate with various IT groups and business units.
• Liaise with audit teams and support management reporting.
• Ensure adherence to security policies and procedures.
• Develop documentation for core security controls and processes.
• Manage:
• Access Management (PAM, IDP, IAM, Access Review)
• Application Security (Layer 7 Protection, DAST, SAST, SDLC)
• Data Security (Data Classification, DLP, CASB, WCG)
• SOC and Threat Intelligence
• Perform security monitoring and analysis of events.
• Simulate attacks to identify and address security gaps.
• Conduct risk analysis and remediation planning.
• Analyze supplier deliverables and closure reports.
• Assist in incident response and investigations.
• Participate in agile processes to improve security controls.
• Monitor, manage, and tune core security controls.
• Develop and deliver security metrics and reports.

Technical Competencies:

• Specialized in Data Security and Exposure Management.
• Expertise in Data Protection across platforms.
• Experience with structured and unstructured data classification.
• Data leakage prevention across network, endpoint, and email channels.
• IT Security risk management and ISMS implementation.
• Conducting awareness trainings (seminars/LMS).
• Cyber liability programs and assurance controls.
• Disaster recovery planning and phishing programs.
• SOC management and cybersecurity expertise.
• Familiarity with cloud platforms and technologies.
• Tools & Technologies: PAM, IAM, NAC, INP/ADES, Cloud SSO.

Qualification & Experience:

• Bachelor’s degree in Computer Science, Engineering, or related field (or equivalent work experience).
• 6–8 years in Information Technology.
• 3–5 years in Information Security across risk management domains.
• Certifications of Product certifications in Security (preferred).