Chief Information Security & Cyber Risk Leader

Remotedxb; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

AIOS is building the world's first full-stack AI doctor. We are a fast-growing, founder-led company with a growing cybersecurity program across multiple geographies. We are seeking a security leader to own strategy and operations.

You will establish security operations, manage IAM, protect cloud infrastructure, and drive risk assessments to meet HIPAA, GDPR, SOC 2, and ISO 27001. This role requires autonomy in a high-growth environment.

Qualifications

• 5+ years leading cybersecurity in a complex, fast-growing organization.
• Deep technical expertise in IAM, endpoint security, cloud infrastructure, and application security.
• Proven track record of building or significantly improving a security program from the ground up.
• Experience handling highly sensitive patient, financial, or regulated data.
• Ability to work autonomously in an evolving, high-growth environment.

Responsibilities

• Own cybersecurity strategy, roadmap, and operating model across all AIOS entities and geographies.
• Establish security operations, incident response, and disaster recovery systems.
• Manage IAM, endpoint security, and secure employee lifecycles.
• Partner with engineering to secure apps, APIs, cloud infrastructure, and data.
• Lead risk assessments and ensure HIPAA, GDPR, SOC 2, and ISO 27001 compliance.
• Manage third-party security risks and foster security awareness across the organization.

Skills

Cybersecurity leadership

IAM

Endpoint security

Cloud security

Application security

Regulatory compliance

Tools

IAM platforms

SIEM

Incident response

Cloud security tools

Job description

AIOS is building the world's first full-stack AI doctor. We are a fast-growing, founder-led company with a growing cybersecurity program across multiple geographies. We are seeking a security leader to own strategy and operations.

You will establish security operations, manage IAM, protect cloud infrastructure, and drive risk assessments to meet HIPAA, GDPR, SOC 2, and ISO 27001. This role requires autonomy in a high-growth environment.