Cybersecurity Manager

Daman Investments; Dubai; On-site; AED 240,000 - 400,000; Full time

Job summary

Daman Investments in Dubai is seeking a Cyber Security Manager to oversee day-to-day information security controls across Daman Securities and Daman Investments, manage MSSP relationships, run vulnerability management and incident response, and support audits.

You will maintain security policies, risk register, and provide evidence for CMA regulatory requests, while guiding security improvements and ensuring go-live security for new systems.

Qualifications

• Bachelor's degree or equivalent experience.
• 5-8 years of information security experience with hands-on exposure to SOC operations.
• Experience with vulnerability management, incident response, and IAM.
• Familiarity with UAE CMA/PDPL expectations is advantageous.

Responsibilities

• Manage day-to-day relationship with the SOC/MSSP, including alert triage and SLA compliance.
• Execute incident response playbooks and support post-incident reviews and regulatory notifications.
• Run vulnerability management and coordinate penetration testing, tracking findings to remediation.
• Maintain information security policies, standards, and the risk register; support audits and regulatory requests.
• Support responses to due diligence reviews and client security questionnaires.

Skills

Security operations

Incident response

Vulnerability management

Identity and access management

Data protection

Cloud security fundamentals

SOC/MSSP experience

Communication

Arabic language skills

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft 365 Defender

Entra ID

Purview

MSSP tooling

Job description

JOB OVERVIEW

The Cyber Security Manager is responsible for the day-to-day operation and continuous improvement of information security controls across Daman Securities and Daman Investments. The role manages the relationship with the Group's managed security service provider, runs vulnerability management and incident response, maintains security policies and the risk register, and supports regulatory and audit requests. The Cyber Security Manager reports to the Group CIO and executes the Group's information security program rather than setting Group strategy.

KEY DUTIES AND RESPONSIBILITIES

Security Operations & Incident Response

• Manage the day-to-day relationship with the managed SOC / MSSP, including alert triage, escalation, and tracking performance against SLA.
• Execute incident response playbooks, coordinate containment and recovery, and support post-incident review and regulatory notification under the Group CIO's direction.
• Run the vulnerability management programme and coordinate penetration testing, tracking findings through to remediation.

Policy, Risk & Compliance Support

• Maintain and update information security policies, standards, and procedures within the framework set by the Group CIO.
• Maintain the information security risk register and produce regular reporting on risk position and remediation status.
• Prepare evidence and coordinate responses for internal audit, external audit, and CMA regulatory requests on information security matters.
• Support responses to institutional due diligence reviews and client security questionnaires for Daman Securities and Daman Investments clients.

Identity, Access & Data Security

• Administer identity and access management processes, including joiner-mover-leaver workflows, privileged access, and periodic access recertification.
• Support data classification, data loss prevention, and encryption standards, and test backup and recovery restorability.
• Provide security input on change requests - new systems, integrations, and vendor onboarding - ahead of go-live.

POSITION REQUIREMENTS

Educational Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent demonstrable experience.

Technical Competencies

• Working knowledge of security operations, incident response, vulnerability management, identity and access management, and data protection.
• Familiarity with Microsoft 365 security tooling (Defender, Entra ID, Purview) and cloud security fundamentals.
• Experience working with a managed SOC or MSSP provider.
• Working knowledge of UAE information security expectations relevant to financial services (CMA, PDPL) is an advantage.

Skills/Personal Attributes

• Structured and detail-oriented, with the ability to execute consistently against an established control framework.
• Good communicator, comfortable working across IT, trading, wealth management, and HR/EOS teams.
• High level of integrity and discretion in handling sensitive and confidential information.
• Arabic language skills are an advantage.

Work Experience

• 5-8 years of experience in information security or IT risk, with hands-on exposure to SOC operations, vulnerability management, or identity and access management.
• Experience in financial services is preferred but not required.
• A relevant certification (e.g. CISSP, CISM, CISA, Security+) is preferred, or a willingness to obtain one.