Dubai-Based IT Operations & Security Leader

Global Hotel Alliance; Dubai; On-site; AED 300,000 - 550,000; Full time

Job summary

Global Hotel Alliance in Dubai seeks a senior IT & security leader to run IT operations, security monitoring and ISMS governance. The role combines hands-on technical work with managing partners and suppliers, owning IT controls for ISO 27001 and audit preparation.

You will oversee cloud infrastructure, networks, IAM and endpoint security, lead incident response, DR exercises and third-party security reviews, and ensure security by design across the full lifecycle from build to decommissioning.

Qualifications

• Bachelor's degree in IT, computer science or a related field.
• 8+ years in IT with at least 3 years leading IT operations and security teams.
• Strong knowledge of cloud infrastructure, networks, IAM, and endpoint security.
• Experience managing outsourced providers, including a SOC or managed security service.
• Experience supporting ISO 27001 ISMS implementation and audit preparation.
• Working knowledge of data protection requirements including GDPR and UAE PDPL

Responsibilities

• Run day-to-day IT operations across cloud infrastructure, networks, email and collaboration platforms.
• Ensure security is built into all systems and architectures, from design through to change and decommissioning.
• Own the operational integrity of end-user devices and network performance.
• Run user support operations, setting clear technical standards and meeting agreed SLAs.
• Deliver the company’s mandatory security awareness training in partnership with the GRC function.
• Develop IT capacity plans, budgets and technology roadmaps for leadership approval.
• Oversee the operational security posture through continuous infrastructure monitoring and vulnerability management.
• Administer core security tools, including email gateways, endpoint protection, patching systems, and access controls.
• Collaborate with the VP of IT GRC and Information Security leadership to ensure alignment on enterprise risk thresholds, threat intelligence, and vulnerability management priorities.
• Oversee identity and access management, including Joiner/Mover/Leaver (JML) access processes.
• Act on alerts and findings from the outsourced Security Operations Centre (SOC).
• Run third-party security reviews of vendors and suppliers.
• Implement and maintain the ISO 27001 ISMS controls across IT.
• Keep information security policies, procedures and control evidence current and ready for audit.
• Close IT-related audit findings on agreed timelines.
• Manage the Managed Security Partner’s day-to-day work, including SOC services, vulnerability testing and technical compliance tasks.
• Acts as the technical lead for incident handling, executing swift containment strategies and managing the root-cause investigation and recovery lifecycle.
• Run regular disaster recovery tests and business continuity reviews with key partners.
• AI Operations & Secure Tool Adoption: Oversee the secure integration, deployment, and day-to-day operations of authorized AI platforms in alignment with AI Governance Policy.
• AI Data Privacy & Prompt Security: Enforce data protection protocols and prompt engineering standards across IT systems to prevent PII exposure into AI tools.
• AIOps & Automated Incident Response: Implement and manage AIOps capabilities to automate IT service management workflows and incident containment.
• AI Compliance & Risk Assessment: Monitor AI-enabled IT infrastructure for security vulnerabilities and maintain audit-ready evidence for ISO 27001 ISMS compliance

Skills

Cloud infrastructure

Identity & access management

Endpoint security

Outsourced providers

ISO 27001 ISMS

Data protection

Education

Bachelor's degree in IT

Job description

Global Hotel Alliance in Dubai seeks a senior IT & security leader to run IT operations, security monitoring and ISMS governance. The role combines hands-on technical work with managing partners and suppliers, owning IT controls for ISO 27001 and audit preparation.

You will oversee cloud infrastructure, networks, IAM and endpoint security, lead incident response, DR exercises and third-party security reviews, and ensure security by design across the full lifecycle from build to decommissioning.