الوظائف الحالية

To be based in Al Ain, UAE. 
We are seeking an experienced Senior Information Security Specialist to lead cybersecurity governance, risk management, security operations oversight, and compliance initiatives within a large enterprise environment. The successful candidate will be responsible for managing security governance activities, overseeing security service providers, coordinating vulnerability and risk management programs, supporting audit readiness, and delivering security reporting to senior stakeholders.

Key Responsibilities

• Lead Information Security Governance, Risk & Compliance (GRC) activities.
• Conduct and manage enterprise-wide cybersecurity risk assessments.
• Review and oversee security incidents, vulnerabilities, and remediation activities.
• Monitor security KPIs, compliance metrics, and security posture reporting.
• Manage vulnerability assessment and remediation governance programs.
• Coordinate internal and external audits and ensure audit readiness.
• Develop and maintain security policies, standards, procedures, and controls.
• Oversee third-party security assessments, vendor risk reviews, and MSSP performance.
• Review security operations reports, service levels, and improvement plans.
• Prepare executive-level security dashboards, risk reports, and management updates.
• Ensure compliance with security frameworks, regulatory requirements, and industry best practices.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related discipline.
• Minimum 15 years of Information Security/Cybersecurity experience.
• At least 10 years in a specialist, governance, risk, compliance, security management, or consulting role.
• Professional certification such as:
  • CISSP
  • CISM
  • CISA
  • Security+ (or equivalent)
• Strong experience in:
  • Information Security Governance
  • Risk Management
  • GRC Programs
  • ISO 27001
  • NIST Frameworks
  • Audit & Compliance Management
  • Vulnerability Management
  • Incident Management Oversight
  • Third-Party Risk Management
  • Security Reporting & Metrics

Preferred Qualifications

• Experience managing or governing Managed Security Service Providers (MSSPs).
• Knowledge of SIEM, EDR, DLP, IAM/PAM, and Vulnerability Management platforms.
• Experience with cloud security governance and security architecture reviews.
• ISO 27001 Lead Auditor/Lead Implementer, CRISC, CCSP, CCSK, or similar certifications.
• Experience in banking, financial services, government, utilities, aviation, telecom, or other regulated sectors.

Key Competencies

• Stakeholder Management
• Executive Communication
• Vendor & MSSP Governance
• Risk Assessment & Mitigation
• Audit Readiness
• Security Operations Governance
• Strategic Security Planning
• Problem Solving & Decision Making