Head, Information Security & Compliance

United Arab Emirates University, Department of Family Medicine; Abu Dhabi; On-site; AED 450,000 - 750,000; Full time

Job summary

United Arab Emirates University, Department of Family Medicine, is seeking an Information Security Head to lead the university's cybersecurity program, safeguard digital assets, and align with national and international standards. You will shape strategy, governance, and risk management while building a resilient security posture across IT, OT, and cloud environments.

Lead 24/7 SOC operations, incident response, audits, and continuous improvement; report to executive leadership and advance

Qualifications

• Bachelor’s degree in information security, Computer Science or related field.
• 10+ years in senior cybersecurity leadership roles in large environments.

Responsibilities

• Develop and implement enterprise-wide information security strategy.
• Oversee SOC operations, 24/7 monitoring, incident response and investigations.
• Establish governance frameworks, policies, and procedures for security.
• Ensure compliance with UAE frameworks and international standards.
• Coordinate audits, ensure evidence and corrective actions.
• Lead risk assessments, vulnerability management, threat modeling.
• Drive security awareness, training, and vendor security governance.
• Collaborate with cross-functional teams to embed security in projects.

Skills

Cybersecurity leadership

Risk management

Governance & policy

Incident response

Security operations

Threat modeling

Vulnerability management

Security architecture

Vendor risk management

Education

Bachelor’s degree in information security or Computer Science

Tools

Splunk SIEM

EDR

SOAR

NDR

IAM

BCP/DR planning tools

Job description

Job Description

Information Security Head serves as a key member of UAEU’s leadership team, responsible for safeguarding the university’s digital assets and ensuring the confidentiality, integrity, and availability of information. This role oversees compliance with UAE cybersecurity regulations and international standards, while building a robust and resilient security infrastructure to protect against evolving threats. Information Security Head provides strategic direction for information security, risk management, and governance, and leads the development of high-performing cybersecurity teams to support UAEU’s mission and objectives.

• Develop and implement UAEU’s enterprise-wide information security strategy.


• Maintain a comprehensive security program covering cyber defense, data protection, and SOC operations.


• Establish and maintain security governance frameworks, policies, and procedures.


• Draft, publish, and enforce security policies for acceptable use, access control, and incident management.


• Identify, assess, and mitigate cybersecurity risks across IT, OT, and cloud environments.


• Conduct risk assessments, vulnerability scans, and threat modeling; prioritize remediation efforts.


• Ensure compliance with UAE national cybersecurity frameworks and international standards.


• Coordinate audits, maintain compliance evidence, and implement corrective actions.


• Oversee Security Operations Centre (SOC) operations and incident response.


• Manage 24 × 7 monitoring, detection, and response; validate SIEM (Splunk) and EDR integrations.


• Lead responses to security incidents, breaches, and investigations.


• Direct triage, containment, recovery, and post-incident reviews.


• Develop and test business continuity and disaster recovery plans.


• Maintain BCP/DR documentation and conduct annual tests.


• Evaluate and manage security posture of vendors and service providers.


• Perform third-party risk assessments and enforce contractual security clauses.


• Drive security awareness and training programs.


• Deliver employee training and phishing simulations, measure effectiveness.


• Manage security architecture and technology stack.


• Oversee SOAR, TIP, NDR, DRP, IAM implementations and secure configurations.


• Monitor and report on security posture to executive leadership.


• Prepare monthly, quarterly, and annual reports with SLA compliance and incident summaries.


• Collaborate with cross-functional teams to embed security in projects.


• Review new initiatives for risk before deployment.


• Ensure the continuous evaluation, adoption, and implementation of new security technologies and necessary upgrades to maintain a resilient and modern cybersecurity posture and stay ahead of emerging threats and technologies.

Minimum Qualification

Bachelor’s degree in information security, Computer Science, or related field.

Preferred Qualification

Bachelor’s degree in information security, Computer Science, or related field.

Expected Skills

10+ years’ demonstrable experience in senior cybersecurity leadership (CISO, Deputy CISO, Head of Security) in large/complex environments.

Close Date

30/09/2026