Chief Infosec Officer

beBeeRisk; Dubai; On-site; AED 200,000 - 300,000; Full time

Job summary

A renowned cybersecurity firm in Dubai is seeking an experienced Information Security Risk Officer. This role involves coordinating security steering committee activities, developing information security management systems, and conducting risk assessments to ensure compliance with standards and regulations. The ideal candidate should have strong leadership skills and extensive experience in information security management, strategic thinking, and audit compliance. This full-time position offers a chance to lead crucial security initiatives in a dynamic environment.

Qualifications

• Strong leadership skills required.
• Experience in information security management is essential.
• Knowledge of risk assessment methodologies and audit compliance.

Responsibilities

• Coordinate Security Steering Committee activities.
• Develop and maintain Information Security Management System.
• Conduct periodic reviews and risk assessments.
• Maintain ISMS certification against international standards.
• Manage security incident response within the Certification Authority.

Skills

Leadership skills

Strategic thinking

Effective communication

Risk assessment

Audit compliance

Job description

Information Security Risk Officer Role

We are seeking an experienced Information Security Risk Officer to coordinate security steering committee activities, develop and maintain information security management systems, and conduct periodic reviews and risk assessments.

Main Responsibilities

• Coordinate Security Steering Committee activities
• Develop and maintain Information Security Management System including development of policies and processes related to information security based on standards
• Develop a risk management framework
• Conduct periodic reviews/risk assessments to ensure risks are addressed to be in compliance with internal/external auditors and regulatory requirements
• Maintain the inventory of all PKI assets along with IT Operations Team
• Maintain ISMS certification against international standards such as ISO 27001 or NIST CSF
• Develop and maintain a data classification program
• Maintain Certification Authority risk register
• Develop vulnerability assessment plan, coordinate vulnerability assessment and penetration testing tasks, develop and present vulnerability assessment reports to Management
• Manage security incident response within the Certification Authority
• Develop and conduct security awareness programs and sessions
• Develop and maintain Business Continuity Management program
• Prepare monthly reports on Certification Authority security status

Qualifications & Experience

This role requires strong leadership skills, strategic thinking, and effective communication. The successful candidate will have experience in information security management, risk assessment, and audit compliance.

Seniority Level: Mid-Senior level | Employment Type: Full-time | Job Function: Information Technology