Key Responsibilities

• Develop and execute security strategy and objectives pertaining to cyber defense goals aligned with organizational vision
• Establish and maintain a Security Governance Board that oversees security progress and decision-making within the organization
• Develop and maintain a comprehensive cybersecurity governance framework aligned with UAE regulations (NESA, aeCert, ADSIC) and international standards (ISO27001)
• Capture current security posture and prepare strategic plans for continuous improvement
• Lead and direct security teams to develop and implement security policies, handle operational security tasks, and deliver security solutions
• Manage incident response resources to proactively prevent known or emerging threats, including zero-day vulnerabilities
• Oversee the operation of Security Operations Center (SOC) and CERT functions, ensuring 24/7 monitoring of security events
• Provide Security Incident Management to IT and Operational Technology (OT) teams
• Conduct comprehensive risk assessments to identify potential security threats and vulnerabilities within IT infrastructure, applications, and data
• Evaluate security weaknesses within the organization and propose suitable resolutions with effective mitigation approaches
• Play a vital role in Security Architecture contributing to Enterprise Architecture decisions
• Prepare the organization to adopt data security practices and implement data privacy measures
• Conduct security awareness programs suitable to different teams and management levels via various channels
• Involve security teams in the project lifecycle from start to end
• Ensure compliance with ISO27001 and other UAE security regulations (SIA/NESA, aeCert, ADSIC)
• Manage and ensure Disaster Recovery capabilities that contribute to Business Continuity
• Develop and manage the budget for information security, monitoring financial performance and justifying investments
• Assess the security posture of vendors and third-party service providers to ensure compliance with security standards
• Report and present security threats, risks, and mitigation approaches to senior management and relevant committees

Required Experience

• 15+ years of progressive experience in information security, cybersecurity, or IT security roles
• 5+ years in a senior leadership position (Director, Head of Security, Senior Manager, or Acting CISO)
• Proven experience leading and managing security teams
• Experience developing and executing security strategy aligned with business objectives
• Experience establishing and maintaining Security Governance frameworks
• Experience with incident response management and Security Operations Center (SOC) oversight
• Experience conducting risk assessments and developing mitigation strategies
• Experience with security budgeting and resource management

Required Skills

• Deep understanding of information security, cybersecurity, and cyber defense principles
• Strong knowledge of UAE security regulations: NESA, aeCert, ADSIC, and SIA requirements
• Expertise in ISO27001 implementation and compliance
• Proficiency in security architecture and enterprise architecture integration
• Strong understanding of Operational Technology (OT) security principles
• Knowledge of Business Continuity Planning and Disaster Recovery
• Excellent analytical and problem-solving skills for security risk evaluation
• Strong written and verbal communication skills for presenting to executive leadership and non-technical stakeholders

Preferred Experience

• Experience in critical infrastructure sectors (telecommunications, airports, utilities, transportation, or government)
• Experience acting as CISO or in a similar executive security role
• Experience with ITIL process implementation
• Experience managing CERT (Computer Emergency Response Team) operations
• Experience with data privacy and data protection programs

Required Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical field

Required Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)

Preferred Certifications

• SABSA (Sherwood Applied Business Security Architecture)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)

Tools & Technologies

Required proficiency:

• Security Operations Center (SOC) platforms and SIEM tools
• Incident response and threat detection systems
• Risk assessment and vulnerability management tools
• Network security infrastructure (firewalls, IDS/IPS)

Preferred experience:

• Enterprise security solutions: Cisco, Juniper security appliances
• Endpoint protection platforms: McAfee or similar enterprise solutions
• SIEM platforms: RSA Envision, Splunk, or similar
• Identity and Access Management / Single Sign-On solutions (Imprivata SSO, CA SSO, or similar)
• Patch management tools

Preferred industries: Telecommunications, Aviation/Airports, Critical Infrastructure, Government/Semi-Government entities in UAE or GCC region

Work Environment

• Full-time, permanent position
• Based in Abu Dhabi, UAE
• Enterprise organization with multiple subsidiaries and strategic partners
• Collaboration with Executive Affairs Authority, subsidiaries, and managed service providers
• Reports to Executive Director of Digital and Technology
• This position offers a strategic leadership opportunity to shape cyber defense capabilities and protect digital assets across a major organization. The role combines deep technical security expertise with business acumen, requiring the ability to establish governance structures, drive security strategy, and manage relationships with internal teams, subsidiaries, strategic partners, and regulatory bodies in the UAE.

By applying to this position, you are granting us permission to process your CV and keep your profile on file for consideration for this and future opportunities.