Head of Information Security

Aventus Global Talent; United Arab Emirates; On-site; AED 300,000 - 520,000; Full time

Job summary

Aventus Global Talent is seeking a Head of Information Security in Ras-Al-Khaimah to lead our security program across hybrid/multi‑cloud environments and drive Zero Trust initiatives. You will partner with IT, risk, and business units to secure data and operations.

The role demands senior leadership, deep technical expertise in security governance, threat detection, and incident response, plus a proven track record in managing security teams and programs in complex organizations.

Qualifications

• Bachelor’s degree required; Master’s preferred.
• Minimum of 12 years IT experience with 8+ years in Information Security and 4+ years in a senior leadership role.
• Certifications: CISSP, OSCE3, or GSE mandatory; additional security certs highly desirable.
• Experience across hybrid and multi‑cloud environments; Zero Trust concepts.
• Leadership of Security Operations Centers (SOC) and incident response programs.

Skills

Security Architecture

Identity & Access Management

SOC & Threat Detection

Incident Response

Vulnerability Management

Digital Forensics & IR

Security Governance

OT Security

Technology Stack Experience

CISSP

OSCE3

GSE

OSCP

GCIA

GCIH

GCFE

GCFA

CISM

ISO 27001 Lead Implementer/Auditor

ISO 22301 Lead Implementer/Auditor

AZ-500

SC-100

IEC 62443 familiarity

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Electrical Engineering, or related field

Master’s degree preferred

Job description

Head of Information Security

Location: Ras-Al-Khaimah

Qualifications, Experience & Skills

• Minimum 12 years of overall IT experience, including at least 8 years in Information Security and 4 years in a senior leadership or managerial role with responsibility for driving security initiatives across multiple functions and managing security teams.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Electrical Engineering, or a related technical field is required. A Master’s degree is preferred.
• Mandatory certification in at least one of the following: CISSP, OSCE3, or GSE. Candidates without these certifications must demonstrate equivalent hands‑on technical expertise and may be evaluated accordingly.
• Preferred certifications include OSCP, GCIA, GCIH, GCFE, GCFA, CISM, ISO 27001 Lead Implementer/Auditor, and ISO 22301 Lead Implementer/Auditor.
• Microsoft Azure security certifications such as AZ-500 or SC-100 are highly desirable. Knowledge of IEC 62443 standards for OT security is an advantage.

Technical Competencies

• Security Architecture: Expertise in designing and assessing enterprise security architectures across hybrid and multi‑cloud environments, including Zero Trust, SSE/SASE, API security, PKI, encryption, and attack‑path modeling.
• Identity & Access Management: Strong hands‑on experience with Active Directory hardening, privileged access management (PAM), Entra ID, cloud IAM solutions, and mitigation of advanced identity‑based attacks such as DCSync, Kerberoasting, Golden Ticket, and Pass‑the‑Hash.
• SOC & Threat Detection: Proven experience leading Security Operations Centers (SOC), implementing and optimizing SIEM platforms (Microsoft Sentinel, Splunk, QRadar, etc.), EDR solutions, threat detection use cases, and incident response workflows.
• Incident Response: Extensive experience managing the full incident response lifecycle, including detection, containment, eradication, recovery, forensic evidence handling, stakeholder communication, and regulatory reporting.
• Vulnerability Management & Threat Hunting: Hands‑on experience overseeing vulnerability assessments, penetration testing, remediation governance, threat hunting programs, and MITRE ATT&CK-based security operations.
• Digital Forensics & Incident Response (DFIR): Ability to lead compromise assessments, collaborate with forensic teams, analyze forensic findings, and translate outcomes into remediation programs.
• Security Governance & Business Continuity: Strong background in implementing and managing ISMS aligned with ISO 27001, conducting risk assessments, vendor risk management, policy development, and BCM programs aligned with ISO 22301.
• OT Security: Understanding of OT and operational infrastructure security requirements, including the application of risk‑based controls while maintaining operational availability.
• Technology Stack Experience: Firewalls, IPS/IDS, F5 WAF, DDoS protection, email security gateways, Microsoft M365 E5, Defender, MDM, cloud security platforms, CASB, Palo Alto Prisma, Zscaler, CyberArk, BeyondTrust, Entra ID, Active Directory, SAP BTP security, API security, and awareness of OT/ICS protocols and IEC 62443 frameworks.