Department: Information Technology
Location: Dubai, UAE
Industry: Diversified Conglomerate, Contracting & Engineering Sector
Job Purpose
Responsible for strengthening the organization’s cybersecurity posture by managing security operations, governance, risk, compliance, and key security improvement projects across on-premises, cloud, Microsoft 365, Oracle, and enterprise applications. Must have hands-on cybersecurity experience with governance and risk management.
Key Responsibilities
- Manage and enhance cybersecurity operations, SOC, SIEM and incident response.
- Support ISO/IEC 27001 ISMS, security policies, risk assessments, audits, and compliance activities.
- Manage vulnerability management, security assessments, penetration testing, and remediation tracking.
- Implement and improve DLP, PAM/PIM, identity security, Zero Trust, and privileged-access controls.
- Assess and strengthen security across Microsoft 365, Azure, Oracle Cloud (OCI), SaaS, applications, databases, and on-premises infrastructure.
- Conduct third-party/vendor security assessments and track identified risks.
- Support AI security and governance, including ISO/IEC 42001 and controls around enterprise AI platforms.
- Review security requirements for new IT projects, applications, and technology implementations.
- Support cybersecurity requirements for BCP, Disaster Recovery, and cyber resilience.
- Maintain security dashboards and report key risks, incidents, vulnerabilities, compliance gaps, and project progress to management.
Key Projects
SOC/SIEM | ISO 27001 | DLP | PAM/PIM | Cloud Security | AI Security & Governance | Vulnerability Management | Incident Response | Vendor Risk | Application & Database Security | Cyber Resilience
Qualifications & Experience
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or related field.
- 5+ years of relevant cybersecurity experience, preferably within a large enterprise environment.
- Hands-on knowledge of SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management, and incident response.
- Good knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure, Microsoft 365, and cloud security.
- Strong analytical, communication, documentation, and stakeholder-management skills.
Preferred Certifications
CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer/Lead Auditor, Microsoft Cybersecurity certifications, or equivalent.
Key Competencies
- Cybersecurity and risk management
- Security governance and compliance
- Incident and vulnerability management
- Cloud and enterprise security
- Vendor/security assessment
- Project ownership
- Strong communication and collaboration
