Director - Security Affairs (Physical & Cybersecurity)

About the role

A full-time Director of Security Affairs is sought in the UAE to lead and oversee physical security, cybersecurity governance, risk management and incident response. The role covers developing security strategies, strengthening security controls, managing external security service providers and protecting the organisation's people, facilities, information and digital infrastructure.

Key responsibilities

• Physical security: develop and implement security policies, protocols and procedures; oversee access control, visitor management, CCTV, surveillance, intrusion detection and alarm systems; conduct risk assessments and vulnerability reviews.
• Manage security service providers, including vendor selection, contract renewals, performance monitoring and transitions.
• Coordinate physical security incident response with internal stakeholders, external providers and authorities, and run security awareness, emergency response, evacuation and business continuity planning.
• Cybersecurity: maintain cybersecurity policies, standards and procedures; oversee risk assessments, threat analysis, vulnerability management and remediation.
• Work with IT teams and external providers on controls such as firewalls, endpoint protection, encryption and identity and access management.
• Lead cyber incident detection, response, investigation, containment, recovery and reporting, and ensure security is built into IT systems, networks, cloud environments, databases and applications.
• Manage cybersecurity vendors and report risks, incidents, compliance and mitigation to senior management.

Required profile

• Bachelor's degree in Security Management, Cybersecurity, Information Technology, Risk Management or a related discipline; a master's degree is preferred.
• Minimum 15 years of relevant experience, including leadership in security operations, governance or risk management.
• Proven experience overseeing both physical security and cybersecurity through internal teams and external providers.
• Experience in government, defence or critical infrastructure environments is highly desirable.
• Demonstrated expertise in vendor and contract management, stakeholder coordination and senior-level reporting.

Required skills

• Strong understanding of physical security systems, cybersecurity controls, risk assessments and incident management.
• Excellent leadership, strategic planning, communication and decision-making skills.