Information Security Manager (UAE Nationals Only)

About the role

The Information Security Manager will lead RTA's enterprise information security function, ensuring compliance with Dubai standards and safeguarding the organization’s digital assets. This senior position is open to UAE nationals only and involves strategic governance, risk management, and operational oversight of security controls.

Key responsibilities

• Define, approve, and enforce information‑security policies, standards, and audit regimes across RTA.
• Own the risk‑management framework, maintain risk registers, and coordinate periodic reviews with relevant agencies.
• Drive organization‑wide security awareness programs for employees, suppliers, and contractors.
• Manage the information‑security budget, prioritize projects, and monitor execution.
• Commission vulnerability assessments and penetration testing (VAPT), oversee remediation, and conduct risk‑based audits.
• Lead the Security Operations Center (SOC), handle incident investigations, and ensure timely implementation of recommendations.
• Govern access‑control processes, privilege audits, and network/system traffic monitoring.
• Oversee threat‑intelligence collection, analysis, and mock‑exercise planning.
• Implement and maintain the Information Security Management System (ISMS) in line with approved policies.
• Ensure business‑continuity and remedial plans for technical systems are tested and updated.

Required profile

• UAE national with extensive experience in enterprise information security leadership.
• Proven ability to develop and enforce security policies, standards, and governance frameworks.
• Strong track record in risk management, budget oversight, and cross‑departmental coordination.
• Excellent communication skills to brief senior leadership and report on strategy execution.

Required skills

• Vulnerability Assessment and Penetration Testing (VAPT)
• Security Operations Center (SOC) management
• Access‑control governance and privilege auditing
• Threat Intelligence analysis and incident response
• Information Security Management System (ISMS) implementation