Information Security Officer

About the role

We are seeking an experienced Information Security Officer to lead and enhance our organization’s security posture. The role involves developing policies, managing risk, and ensuring compliance with industry regulations.

Key responsibilities

• Develop, maintain and communicate security policies, standards and procedures.
• Conduct regular risk assessments and vulnerability analyses, prioritising remediation.
• Prepare and submit regulatory reports to authorities such as CBUAE and ADHICS.
• Design and deliver security awareness training across departments.
• Lead incident response, including detection, eradication and recovery.
• Manage security technologies including firewalls, intrusion detection/prevention systems and SIEM solutions.
• Monitor compliance with frameworks such as SIA (NESA), ADHICS, DHA, PDPL and ISO.
• Provide regular security posture reports to senior management.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Information Security or related field.
• Relevant certifications such as CISSP, CISM or CISA.
• Minimum 5 years of experience in information security, preferably in financial services or healthcare.
• Strong analytical and communication skills.

Required skills

• Risk assessment and vulnerability management.
• Network security, cloud security and endpoint security.
• Firewalls, intrusion detection/prevention systems and SIEM platforms.