Information Security office Manager

Dubai Public Prosecution; Dubai; On-site; AED 480,000 - 720,000; Full time

Job summary

Dubai Public Prosecution is seeking an experienced Information Security Lead to design and drive the implementation of its security information system in line with organizational strategy. You will develop and update security policies, assess controls, and ensure regulatory compliance across departments.

Strong knowledge of ISO 27001, PCI-DSS, GDPR and incident readiness is required. The role emphasizes leadership of security operations for IT facilities, data protection, and business continuity

Qualifications

• Bachelor's degree in information-related field required.
• Knowledge of information security and cybersecurity policies and procedures.
• Familiarity with ISO 27001, PCI-DSS, and GDPR data protection requirements.

Responsibilities

• Design and plan the implementation of the security information system aligned with strategy and secure required approvals.
• Develop and update security information policies per international and local standards.
• Assess effectiveness of security controls and identify gaps, providing remediation recommendations.
• Ensure compliance with policies across units and align with security standards and legislation.
• Develop awareness and training plans on the information security system.

Skills

Information security knowledge

Analytical thinking

Policy development

Education

Bachelor's degree specializing in information

Tools

ISO 27001

PCI-DSS

GDPR

Job description

• Designing and planning the implementation of the Public Prosecution’s security information system in alignment with the organizational strategy, and securing the Public Prosecutor’s approval.
• Developing and updating security information policies in accordance with relevant international and local standards.
• Initiating the establishment, development, and updating of the Public Prosecution’s security information system, ensuring the accuracy and currency of data, as well as the effective integration of periodic results and operational developments.
• Assessing the effectiveness of implemented security controls, verifying organizational units' adherence to information security policies and procedures, identifying security gaps and vulnerabilities, and providing recommendations for security enhancements.
• Protecting information assets and ensuring business continuity during emergencies.
• Evaluating the adequacy of security measures—whether technical, administrative, or physical—implemented to protect information and systems.
• Ensuring that organizational units comply with approved security policies and procedures and align with relevant security standards and legislation.
• Prepare necessary recommendations for improvement to enhance security measures, update controls, and mitigate risks, and submit them to the Public Prosecutor for approval.
• Monitor compliance with information security requirements when contracting with external parties to ensure the security and confidentiality of sensitive information.
• Develop awareness and training plans regarding the information security system, and ensure their implementation and the measurement of their impact in coordination with the Human Resources Department.
• Oversee the preparation of detailed audit reports outlining internal audit findings, identified risks, and proposed recommendations.
• Manage security operations for IT facilities and servers, ensuring their protection against various environmental conditions, disasters, or damage.
• Providing effective leadership to staff as a cohesive team and developing and implementing office-related policies and procedures.
• Managing the preparation, review, implementation, and updating of office work procedures and methodologies in accordance with best practices.
• Preparing, reviewing, and updating the office’s organizational structure and job descriptions in coordination with relevant departments.
• Evaluating office staff performance based on the performance management system and formulating performance development plans to enhance their skills and prepare them for leadership roles.
• Preparing the office’s annual operational plan and budget.
• Managing the effective implementation of the office's internal communication methodology.
• Adhering to all policies, procedures, and guidelines of the Public Prosecution’s information security system and ensuring office staff compliance with them.
• Ensuring that the office’s work procedures, initiatives, and projects align with the controls and standards of the information security system.
• Monitoring and reviewing internal and external audit results regarding the effective implementation of the information security system, and ensuring that necessary corrective actions are taken in a timely manner.

• Bachelor's degree specializing in information
• Knowledge of information security and cybersecurity policies and procedures.
• Knowledge of international standards (ISO 27001 and PCI-DSS) and data protection regulations such as GDPR.
• Skills of analysis, synthesis, and inference