Senior Information Technology Security Officer

About the role

The Senior Information Technology Security Officer will safeguard the Authority's digital assets, ensuring the confidentiality, integrity, and availability of its information systems. This position leads the development and execution of security strategies, policies, and controls while maintaining compliance with UAE data protection laws and international standards.

Key responsibilities

• Implement and manage the Authority’s information security strategy, aligning it with corporate goals and regulatory requirements.
• Develop, maintain, and enforce security policies, procedures, and standards based on frameworks such as ISO/IEC 27001 and NIST.
• Conduct regular security risk assessments and internal audits to identify threats, vulnerabilities, and improvement opportunities.
• Lead incident response activities, including investigation, containment, recovery, and post‑incident reviews.
• Monitor compliance with relevant laws, regulations, and best practices, and support external audit processes.
• Collaborate with IT teams to remediate vulnerabilities and ensure secure system configurations.
• Design and deliver security awareness and training programs for all staff.
• Continuously monitor information systems for real‑time threat detection and response.
• Prepare regular security reports for senior management, outlining risks, incidents, and recommendations.
• Integrate security controls into business continuity and disaster recovery plans, testing contingency measures regularly.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity or a related field; Master’s degree preferred.
• 4–7 years of experience in information security, with proven expertise in risk management, incident response, and compliance.

Required skills

• Knowledge of ISO/IEC 27001 and NIST security frameworks.
• Experience conducting information security risk assessments and audits.
• Strong incident response and security incident management capabilities.
• Ability to develop and deliver security training and awareness programs.
• Familiarity with UAE data protection laws and international compliance standards.