Information Security Section Head (UAEN)

Lead the organization's information security program and framework, ensuring the confidentiality, integrity, and availability of information assets. The role is responsible for cybersecurity governance, risk management, regulatory compliance, security operations oversight, incident response, and promoting strong security culture across the organization. Kindly note that this role is restricted to UAE Nationals only. Key Responsibilities Develop and implement the organization's information security strategy, policies, standards, and procedures. Lead cybersecurity governance, risk assessment, and compliance initiatives across the organization. Ensure compliance with relevant security frameworks, regulations, and standards such as ISO 27001, NESA/UAE Information Assurance Standards, and data protection requirements. Oversee information security risk management, vulnerability assessments, and remediation programs. Lead incident response, investigation, and reporting processes for cybersecurity and information security events. Manage security awareness and training programs to promote a strong security culture. Collaborate with business units, technology teams, and third-party vendors to embed security requirements into projects and operations. Develop and monitor information security KPIs, reporting regularly to senior management on risks, controls, and compliance status. Qualifications & Experience Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Systems, or a related field. 8+ years of experience in information security, cybersecurity, risk management, or security governance. Demonstrated experience developing and implementing information security policies, frameworks, and controls. Strong knowledge of security standards and frameworks such as ISO 27001, NIST, COBIT, CIS Controls, and UAE cybersecurity requirements. Experience in security risk assessments, audits, compliance reviews, and incident management. Relevant professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer, or equivalent preferred. Strong stakeholder management, communication, and leadership skills. Previous experience within government, regulated industries, financial services, or large enterprise environments is highly desirable. Show more Show less