Information Security Section Head

About the role

Lead the organization’s information security program and framework, ensuring confidentiality, integrity, and availability of information assets. This senior position is responsible for cybersecurity governance, risk management, regulatory compliance, security operations oversight, incident response, and fostering a strong security culture.

Key responsibilities

• Develop and implement the organization’s information security strategy, policies, standards, and procedures.
• Lead cybersecurity governance, risk assessment, and compliance initiatives across the organization.
• Ensure compliance with frameworks and regulations such as ISO 27001, NESA/UAE Information Assurance Standards, and data protection requirements.
• Oversee information security risk management, vulnerability assessments, and remediation programs.
• Lead incident response, investigation, and reporting for cybersecurity events.
• Manage security awareness and training programs to promote a strong security culture.
• Collaborate with business units, technology teams, and third‑party vendors to embed security requirements into projects and operations.
• Develop and monitor information security KPIs, reporting regularly to senior management on risks, controls, and compliance status.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Systems, or related field.
• 8+ years of experience in information security, cybersecurity, risk management, or security governance.
• Demonstrated experience developing and implementing security policies, frameworks, and controls.
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer or equivalent preferred.
• Strong stakeholder management, communication, and leadership skills.
• Experience in government, regulated industries, financial services, or large enterprises is highly desirable.

Required skills

• Knowledge of security standards and frameworks: ISO 27001, NIST, COBIT, CIS Controls, UAE cybersecurity requirements.
• Security risk assessment, audit, and compliance review expertise.
• Vulnerability assessment and remediation.
• Incident response and management.