Manager, IT Security & Compliance - Emirati Talent

About the Job:
The Manager, IT Security & Compliance - Emirati Talent will develop and maintain comprehensive IT security strategies that meet regulatory requirements and industry best practices. Responsibilities include implementing IT resiliency programs, leading incident response efforts, conducting post-incident reviews, coordinating with IT teams and vendors to resolve security incidents, performing regular risk assessments, and overseeing vulnerability mitigation activities. Additionally, the role involves managing IT compliance programs, collaborating with other IT managers to integrate IT security and compliance into overall processes, providing regular reports on IT security status, and maintaining comprehensive documentation of policies and procedures. Staying updated with emerging trends in IT security and fostering relationships with external stakeholders is also crucial.

Key Accountabilities:

• Develop and maintain comprehensive IT security strategies that meet regulatory requirements and industry best practices.
• Implement IT resiliency programs, including Cyber recovery planning and business continuity management.
• Lead incident response efforts and conduct post-incident reviews to refine security practices.
• Perform risk assessments and oversee vulnerability mitigation activities.
• Manage the implementation and compliance of security tools.
• Collaborate with IT managers and departmental leaders to integrate security and compliance.
• Provide reports on IT security and compliance status to the Director and EDGE Leadership.
• Maintain documentation of security and compliance policies and reports.
• Foster relationships with regulators, auditors, and vendors.
• Stay updated with trends in IT security, resiliency, and compliance.

Experience:

• UAE Nationals: Minimum of 10 years of experience in IT Security, Resilience, and Compliance.
• Expatriates: Minimum of 10 years of experience in IT Security, Resilience, and Compliance.

Education:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Relevant professional certification (e.g., CISSP, CISM, GSLC).

Key Skills:

• In-depth understanding of cybersecurity principles and risk management.
• Expertise in Network, Systems, Host, and Cloud Security.
• Knowledge of IT governance, risk management, and control frameworks.
• Familiarity with IT regulations and standards (GDPR, ISO 27001, NIST, CIS).
• Skills in developing and managing incident response plans.