Director of Security and Governance

About the role

The Director of Security and Governance will set the strategic direction for security across Inception42’s enterprise platforms, cloud services, and product environments. You will own security strategy, risk oversight, control assurance, and security operations, translating business priorities into effective protection.

Key responsibilities

• Define and deliver the security strategy, operating model and roadmap aligned with material risks and business priorities.
• Own the information security governance framework, ensuring alignment with ISO 27001, NIST CSF, CIS and UAE requirements.
• Lead security risk management, maintain a risk register and drive risk treatment and acceptance.
• Provide executive reporting on security posture, incidents, remediation and investment trade‑offs.
• Build and lead the security team, set performance expectations and develop succession plans.
• Oversee security operations including SIEM, EDR, detection engineering, incident response and vulnerability management.
• Govern security compliance, ISO 27001 certification activities and internal/external audits.
• Set security architecture standards for cloud workloads and partner with engineering on identity, access and workload protection.

Required profile

• Proven experience leading an information security function with responsibility for strategy, delivery and measurable improvements.
• Strong governance, risk and compliance expertise aligned to ISO 27001, NIST CSF or CIS frameworks.
• Deep practical security operations experience, including SIEM, detection tuning, alert triage, EDR and major incident leadership.
• Cloud security expertise across Azure or AWS, covering posture management, identity and access controls.
• Executive communication skills with the ability to explain trade‑offs and escalate material exposures.
• Relevant certifications such as CISSP, CISM or recognized cloud/security architecture certifications.

Required skills

• ISO 27001
• NIST CSF
• CIS Controls
• SIEM (e.g., Microsoft Sentinel)
• EDR (e.g., Microsoft Defender XDR)
• Vulnerability management
• Azure security services
• AWS security services
• Microsoft Defender for Cloud
• Microsoft Purview
• Microsoft Entra ID
• CISSP or CISM certification