Senior Manager Information Security Operations & Support

About the role

The Senior Manager, Information Security Operations & Support leads monitoring, access review and incident management processes for DET’s systems and databases, ensuring compliance with DET’s information security policies and regulator requirements. The role also governs disaster‑recovery testing, manages third‑party security alignment and oversees the security monitoring function.

Key responsibilities

• Monitor processes and conduct access reviews and authorizations for systems and databases in line with DET policies.
• Govern disaster‑recovery testing, mitigate information‑security risks and report to the regulator and DET management.
• Manage third‑party interactions to ensure applications, systems and software comply with DET security policies.
• Oversee testing activities on third‑party vendor applications and manage all information‑security incidents.
• Provide subject‑matter expertise and advisory services to ensure tool compliance.
• Liaise with the Technology Department to implement vulnerability‑management systems on premise and cloud environments.
• Coordinate security monitoring, review SOC reports and maintain the Dubai Cyber Index score.
• Maintain records of authorized third parties with access to DET data and ensure proper security monitoring.
• Streamline periodic review of user and privileged account access, aligning permissions with role requirements and regulatory standards.

Required profile

• Senior‑level professional with extensive experience in information‑security operations and support.
• Proven experience managing disaster‑recovery testing and incident response.
• Strong background in third‑party risk management and security governance.
• Ability to work closely with technology teams, business owners and external vendors.

Required skills

• Vulnerability management
• Disaster‑recovery testing
• Security monitoring and SOC reporting
• Access review and privileged account management
• Incident management
• Third‑party security risk assessment