Senior Information Technology Manager

About the role

This senior role leads day‑to‑day IT and security operations, ensuring every business system is secure by design from build through decommissioning. It unites IT operations, infrastructure security, and security monitoring while overseeing ISO 27001 ISMS controls and audit preparation.

Key responsibilities

• Run daily IT operations across cloud infrastructure, networks, email and collaboration platforms, maintaining device and network performance.
• Embed security into system design, change and decommissioning, and manage security awareness training.
• Oversee continuous security monitoring, vulnerability management, and administration of core security tools such as email gateways, endpoint protection, patching systems and access controls.
• Manage identity and access processes, including Joiner/Mover/Leaver, and act on alerts from the outsourced SOC.
• Implement and maintain ISO 27001 ISMS controls, keep policies and evidence audit‑ready, and close audit findings.
• Lead the Managed Security Partner, handle incident response, conduct disaster recovery tests and business continuity reviews.
• Supervise secure integration and operation of AI platforms (e.g., Gemini Enterprise, GitHub Copilot) in line with AI governance and data‑privacy policies.

Required profile

• Bachelor's degree in IT, computer science or related field.
• 8+ years of IT experience with at least 3 years leading IT operations and security teams.
• Proven experience managing outsourced providers such as SOCs and supporting ISO 27001 implementation.
• Knowledge of data‑protection regulations including GDPR and UAE Personal Data Protection Law.

Required skills

• Cloud infrastructure (Azure, AWS, OCI) and network design.
• Identity and access management, including JML processes.
• Security tools: email gateways, endpoint protection, patch management, access controls.
• ISO 27001 ISMS controls and audit preparation.
• AI platform integration (Gemini Enterprise, GitHub Copilot) and AI‑related security compliance.