Chief Specialist - Information Security

Tanqeeb; Abu Dhabi; On-site; AED 300,000 - 600,000; Full time

Job summary

Tanqeeb in Abu Dhabi seeks an experienced information security leader to develop and implement strategies aligned with laws, regulations, and Authority needs.

You will oversee incident response, SOC operations, risk management, and governance, while guiding secure design, external supplier assessments, and tool frameworks. Requirements include 9+ years of experience (11+ with a Bachelor’s), and CISSP or CISM with ISO/IEC 27001 Lead credentials.

Qualifications

• Bachelor's or Master's degree in Computer Science/Information Technology.
• 9+ years of experience (11+ years with a Bachelor's).
• Certifications such as CISSP or CISM, ISO/IEC 27001 Lead Implementer/Lead Auditor.

Responsibilities

• Develop and implement information-security strategies aligned with laws, regulations, and Authority needs.
• Define risk framework, maintain registers, scenarios, and response plans with escalation paths.
• Lead SOC operations, incident response, and digital forensics quality.
• Oversee vulnerability assessment, penetration testing, and security tool frameworks.
• Govern access controls, conduct security assessments of external suppliers, and ensure compliance.
• Maintain risk registers, policies, and contingency plans; coordinate with departments on security initiatives.

Skills

Security leadership

Incident response

SOC operations

Risk assessment

Security governance

Education

Bachelor's degree in Computer Science/Information Technology

Master's degree in Computer Science/Information Technology

Tools

CISSP

CISM

ISO/IEC 27001 Lead Implementer/Auditor

Job description

Job description

Strategy

• Develop and implement information-security strategies and operating models aligned with laws, regulations, and Authority needs.
• Define the risk framework: maintain registers, scenarios, and response plans with accountable owners and escalation paths.
• Set Authority-wide security programs and technical standards across sectors to embed best practices consistently.
• Evaluate emerging technologies and threat trends and issue strategic recommendations to improve security systems and infrastructure.
• Coordinate with departments to align cybersecurity strategies and work plans with organizational objectives.

Operations

• Lead in-depth analysis of security incidents, direct incident-response activities, and strengthen digital forensics and investigation quality.
• Plan and coordinate Security Operations Centre (SOC) operations and response workflows with internal and external stakeholders.
• Support and advise team leads in the development and management of the organization’s Vulnerability Assessment and Penetration testing (VAPT) plan and building VAPT tools and frameworks.
• Oversee the conduct of readiness evaluations and penetration tests; recommend preventive and corrective actions and track closure.
• Review architectures for new initiatives and system changes; prescribe security controls during design and implementation.
• Govern access and privileges: apply eligibility/approval procedures, review entitlements, monitor network/system activity, and report compliance.
• Execute risk-based audits of technical systems and projects; evaluate control effectiveness and drive corrective plans.
• Assess new technology projects for alignment with cybersecurity strategy and risk profile; provide improvement recommendations.
• Manage security assessments of external suppliers and partners and ensure compliance with required security standards.
• Execute additional Information Security duties assigned by leadership beyond the defined Section scope.

Product/Process Improvement

• Maintain risk registers and mitigation plans; analyse performance metrics and report system effectiveness and residual risks.
• Manage and update cybersecurity documentation, including policies, procedures, contingency plans, and ensure legal and regulatory compliance.
• Prepare and refine emergency/incident response and recovery plans via exercises and lessons learned.

Job Qualifications & Requirements

Education

• Bachelor's degree/ Master’s degree in Computer Science/ Information Technology

Experience

• 9+ Years in case of Master’s degree (11+ years in case of Bachelor’s degree)

Qualification

• Certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Implementer/ Lead Auditor