Senior Cybersecurity & Governance Specialist

About the role

A diversified conglomerate in the contracting and engineering sector is looking for a Senior Cybersecurity & Governance Specialist in Dubai. The role strengthens the organisation's cybersecurity posture by managing security operations, governance, risk and compliance, and key security improvement projects across on-premises, cloud, Microsoft 365, Oracle and enterprise applications. Hands-on cybersecurity experience with governance and risk management is required.

Key responsibilities

• Manage and enhance cybersecurity operations, SOC, SIEM and incident response.
• Support ISO/IEC 27001 ISMS, security policies, risk assessments, audits and compliance activities.
• Manage vulnerability management, security assessments, penetration testing and remediation tracking.
• Implement and improve DLP, PAM/PIM, identity security, Zero Trust and privileged-access controls.
• Assess and strengthen security across Microsoft 365, Azure, Oracle Cloud (OCI), SaaS, applications, databases and on-premises infrastructure.
• Conduct third-party and vendor security assessments and track identified risks.
• Support AI security and governance, including ISO/IEC 42001 and controls around enterprise AI platforms.
• Review security requirements for new IT projects, applications and technology implementations.
• Support cybersecurity requirements for BCP, disaster recovery and cyber resilience.
• Maintain security dashboards and report risks, incidents, vulnerabilities, compliance gaps and project progress to management.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• 5+ years of relevant cybersecurity experience, preferably in a large enterprise environment.
• Preferred certifications: CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer/Lead Auditor, Microsoft Cybersecurity certifications or equivalent.
• Strong analytical, communication, documentation and stakeholder-management skills.

Required skills

• SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management and incident response.
• Good knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure and Microsoft 365.
• Cybersecurity and risk management, security governance and compliance, vendor and security assessment, project ownership.