Cyber Security Governance Manager (Emirati Talent)

ENOC; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading energy company in Dubai seeks a Cyber Security Governance Manager to lead governance efforts in safety and compliance for critical infrastructure. You will monitor cybersecurity regulations, develop and enforce policies, and manage risk assessments. The ideal candidate has 7+ years of IT experience, strong skills in cybersecurity frameworks, and relevant certifications. This role offers the opportunity to shape cybersecurity strategies in a dynamic environment.

Qualifications

• 7+ years in IT, including 5 years in cybersecurity and 2 years in a supervisory role.
• Certifications like CISSP, CISM, or ISO 27001 Lead Auditor preferred.

Responsibilities

• Monitor compliance with UAE cybersecurity regulations.
• Develop and enforce cybersecurity policies and standards.
• Conduct security assessments of third-party vendors.
• Lead cybersecurity awareness campaigns and training programs.
• Manage risk assessment processes for information assets.

Skills

Cybersecurity frameworks expertise

Strong interpersonal skills

Project management

Communication skills

Education

Bachelor's degree in Computer Science

MBA or MS in Information Security

Job description

Join ENOC as a Cyber Security Governance Manager, leading governance and compliance efforts to safeguard critical infrastructure and information assets in an OT environment. Collaborate with internal teams and external stakeholders to align cybersecurity strategies with business goals and regulatory standards.

Key Responsibilities:

Compliance Management and Audit Support

• Monitor and ensure compliance with UAE cybersecurity regulations, such as ISR and UAE Information Assurance Standards.
• Support audits and regulatory assessments, including preparing documentation and tracking remediation.
• Collaborate with legal and audit teams to address cybersecurity-related compliance issues effectively.

Policy & Standards Development and Maintenance

• Develop, update, and enforce cybersecurity policies, standards, and guidelines.
• Ensure policies align with industry standards like ISO 27001 and NIST frameworks.
• Facilitate organization-wide acceptance and adherence to cybersecurity policies.

Supplier Security Assessment

• Conduct thorough security assessments of third-party vendors and suppliers to ensure compliance with ENOC’s security standards.
• Work closely with procurement and legal teams to embed cybersecurity requirements into contracts.

Projects Delivery Security Support

• Provide expert guidance on cybersecurity controls during project planning and execution phases.
• Collaborate with IT and business units to integrate security measures into new initiatives.
• Conduct risk assessments for projects to ensure alignment with ENOC’s security objectives.

Cyber Awareness and Training Support

• Lead the design and delivery of cybersecurity awareness campaigns and training programs.
• Develop engaging materials and sessions to educate employees on best practices and compliance requirements.
• Ensure awareness programs meet regulatory standards and drive long-term behavioral change.

Cyber Risk and Controls Assessment and Management

• Manage risk assessment processes for information assets, applications, and third-party systems.
• Track risk trends, identify vulnerabilities, and recommend mitigation strategies.
• Benchmark cybersecurity risk management practices with industry peers to maintain best-in-class standards.

Cyber Reporting to Management

• Develop and maintain comprehensive reports on risks, vulnerabilities, and compliance metrics.
• Present actionable insights and updates to senior management and relevant stakeholders.
• Track the effectiveness of cybersecurity measures and recommend enhancements.

Requirements:

• 7+ years in IT, including 5 years in cybersecurity and 2 years in a supervisory role.
• Expertise in cybersecurity frameworks (ISO 27001, NIST, TOGAF) and UAE-specific regulations.
• Strong interpersonal, project management, and communication skills to engage diverse stakeholders.
• Certifications such as CISSP, CISM, CISA, CRISC, DESC Cyber Bootcamp, ISO 27001 Lead Auditor, or equivalent preferred.
• Bachelor's degree in Computer Science; MBA or MS in Information Security is a plus.