About the Role
This position is responsible for ensuring that information security initiatives align with overall business and IT objectives, along with federal government requirements. The role encompasses developing ongoing support plans, establishing a security culture, and managing incident responses to ensure robust information security assurance. Key activities include implementing security strategies and policies, conducting risk assessments, and leading IT security projects.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
-
Cyber Security
- Ensure alignment of information security initiatives with the company's business and IT objectives and federal requirements.
- Develop continuous support plans for information security activities within the company's IT.
- Promote an information security culture across the company.
- Create, implement, maintain, and review comprehensive security strategies, policies, and procedures to ensure regulatory adherence.
- Establish and manage a security incident management framework for coordinated incident responses.
- Plan and implement information security awareness and training programs for employees and vendors.
-
ISO Compliance
- Coordinate the information security efforts of ISMS roles with security responsibilities.
- Act as a liaison across departments to maintain a consistent Information Security Management System (ISMS).
-
Security Risk Management
- Create and maintain an asset register for the IT department.
- Develop, maintain, and review the ISMS Risk Management Methodology.
- Conduct periodic risk assessments and prepare risk treatment plans to mitigate security risks.
-
Cyber Security Project Management
- Manage IT security projects to ensure objectives (cost, budget, timelines, scope, and quality) are achieved.
- Guide Project Managers in security planning, organization, and control of IT projects.
-
Change Management
- Authorize and manage changes, upgrades, or enhancements to systems based on stakeholder consultation to keep the company's IT services current and user-friendly.
-
Security Policies, Systems, SLA, Processes & Procedures
- Recommend improvements to IT Security policies, procedures, and controls to meet procedural and legislative requirements while providing quality service.
- Liaise with IT Planning to review policies and procedures relevant to the ISMS framework.
- Monitor security systems to ensure adherence to established SLAs.
-
Audits, Assessments & Reviews
- Follow up on internal/external security assessment plans and audit reports.
- Review security controls for adequacy, efficiency, and compliance, providing recommendations where necessary.
- Ensure that action plans from assessments, reviews, and audits are effectively followed up.
-
Leadership
- Manage the achievement of unit objectives through effective IT department leadership, including setting goals and managing team performance.
- Enhance efficiencies, leverage technologies, and maximize performance in IT services.
- Responsible for recruitment and performance management according to management directives.
Requirements
- Bachelor’s degree in IT, Information Systems, or a related discipline.
- 5-7 years of experience in a relevant environment.
- Certification in the implementation of ISMS – ISO 27001 standards.
