IT Security Officer

About the role

We are looking for a full‑time, on‑site IT Security Officer to join our Dubai team. The role will lead the design, implementation and ongoing management of a corporate‑wide cyber security programme, ensuring that all information assets are protected against evolving threats.

Key responsibilities

• Develop, implement and monitor a strategic enterprise information security and IT risk management programme.
• Work with the CTO and IT functions to conduct cyber security risk assessments and audits.
• Evaluate the threat landscape and lead compliance initiatives.
• Implement security policies, procedures and documentation for cyber security reports and guidelines.
• Manage and administer security devices such as firewalls, core switches, web and spam filtering solutions.
• Coordinate with infrastructure and cloud teams to ensure devices are protected and operational.
• Conduct periodic security checks, penetration testing, vulnerability assessments and backup restoration verification.
• Oversee incident management, track incidents and support crisis situations.
• Review audit findings and remediate security issues.
• Promote security awareness through training and workshops across the INDEX Holding group.
• Ensure compliance with evolving cyber security regulations and standards.

Required profile

• Proven experience in information security and IT risk management, preferably in a large enterprise.
• Strong understanding of cyber security frameworks, compliance standards and audit processes.
• Ability to work closely with senior IT leadership and cross‑functional teams.
• Experience in developing security policies, procedures and documentation.
• Familiarity with business continuity and disaster recovery planning.

Required skills

• Firewalls
• Core switches
• Web filtering solutions
• Spam filtering solutions
• Penetration testing
• Vulnerability assessment
• Backup restoration verification
• Patch management
• Incident management
• Risk assessment
• Auditing and compliance
• Information security management frameworks