Cybersecurity Strategy & Operations Leader

Beyond Group; Dubai; On-site; AED 420,000 - 780,000; Full time

Job summary

OMNIYAT seeks a Senior Manager – Cybersecurity to lead the Group's security function in the UAE, defining strategy, controls and the operating model to safeguard information assets across real estate and enterprise platforms.

The role oversees SOC, threat detection, incident response, and risk programs, implementing enterprise security policies, identity & access, zero-trust, and resilience through continuity planning.

Qualifications

• Bachelor's degree in Computer Science / IT.
• CISSP / CISM / CEH / ISO 27001 LA certifications strongly preferred.
• 12-15 years of cybersecurity experience in GCC region, preferably in Real Estate or large enterprises.
• At least 3 years in a leadership role.

Responsibilities

• Lead the Group's cybersecurity strategy, frameworks and operating model.
• Direct security operations including SOC, threat detection and incident response.
• Establish enterprise security policies, standards and controls.
• Drive risk assessments, vulnerability management and penetration testing programmes.
• Manage cybersecurity tools and platforms including SIEM, EDR, DLP and IAM.
• Drive compliance with PDPL, ISO 27001 and applicable cybersecurity regulations.
• Establish identity and access management, privileged access and zero-trust principles.
• Direct cyber incident management, forensic investigation and reporting.
• Establish secure architecture standards and review of digital initiatives.

Skills

Cybersecurity leadership

Security strategy

Risk management

Threat detection

Incident response

Policy governance

Education

Bachelor's degree in Computer Science / IT

Tools

SIEM

EDR

DLP

IAM

Job description

OMNIYAT seeks a Senior Manager – Cybersecurity to lead the Group's security function in the UAE, defining strategy, controls and the operating model to safeguard information assets across real estate and enterprise platforms.

The role oversees SOC, threat detection, incident response, and risk programs, implementing enterprise security policies, identity & access, zero-trust, and resilience through continuity planning.