Cybersecurity Manager — Incident Response & Risk Oversight

Daman Investments; Dubai; On-site; AED 240,000 - 400,000; Full time

Job summary

Daman Investments in Dubai is seeking a Cyber Security Manager to oversee day-to-day information security controls across Daman Securities and Daman Investments, manage MSSP relationships, run vulnerability management and incident response, and support audits.

You will maintain security policies, risk register, and provide evidence for CMA regulatory requests, while guiding security improvements and ensuring go-live security for new systems.

Qualifications

• Bachelor's degree or equivalent experience.
• 5-8 years of information security experience with hands-on exposure to SOC operations.
• Experience with vulnerability management, incident response, and IAM.
• Familiarity with UAE CMA/PDPL expectations is advantageous.

Responsibilities

• Manage day-to-day relationship with the SOC/MSSP, including alert triage and SLA compliance.
• Execute incident response playbooks and support post-incident reviews and regulatory notifications.
• Run vulnerability management and coordinate penetration testing, tracking findings to remediation.
• Maintain information security policies, standards, and the risk register; support audits and regulatory requests.
• Support responses to due diligence reviews and client security questionnaires.

Skills

Security operations

Incident response

Vulnerability management

Identity and access management

Data protection

Cloud security fundamentals

SOC/MSSP experience

Communication

Arabic language skills

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft 365 Defender

Entra ID

Purview

MSSP tooling

Job description

Daman Investments in Dubai is seeking a Cyber Security Manager to oversee day-to-day information security controls across Daman Securities and Daman Investments, manage MSSP relationships, run vulnerability management and incident response, and support audits.

You will maintain security policies, risk register, and provide evidence for CMA regulatory requests, while guiding security improvements and ensuring go-live security for new systems.