Information Security Operations Lead

Star Services LLC; Abu Dhabi; On-site; AED 223,200 - 334,800; Full time

Job summary

A leading services company in Abu Dhabi is seeking an Information Security Operations Lead to manage enterprise cybersecurity operations. The role includes overseeing regulatory compliance, risk assessments, and implementing advanced security controls across various platforms including cloud environments. Candidates should have 6–10 years of experience, a relevant degree, and certifications such as CISSP or CISM. This position offers a challenging opportunity in a dynamic environment, focusing on cutting-edge cybersecurity practices.

Qualifications

• Minimum 6 years of experience in cybersecurity, preferably in Banking/Fintech.
• Relevant certifications such as CISSP, CISM, CISA, CEH, ISO 27001 are required.

Responsibilities

• Maintain IT/IS policies aligned with regulatory standards.
• Lead cybersecurity risk assessments and maintain risk frameworks.
• Design and implement Zero Trust architecture.
• Plan and oversee VAPT activities.
• Secure cloud and container environments using DevSecOps practices.
• Manage IAM/PAM, EDR/XDR, and endpoint security.
• Operate SIEM and threat hunting operations.

Skills

Regulatory compliance (NIST, ISO 27001, UAE CB, PCI DSS)

Cloud security & DevSecOps (SAST, DAST, SCA, IaC)

VAPT & vulnerability management

IAM/PAM, EDR/XDR, SIEM/SOAR

Zero Trust & network security

Education

Bachelor's/Master's in IT or Cybersecurity

Tools

AWS

Azure

GCP

Job description

Job Title: Information Security Operations Lead

Reporting To: Chief Technology Officer

Role Summary

The Information Security Operations Lead is responsible for managing enterprise cybersecurity operations, ensuring regulatory compliance, mitigating risks, and implementing advanced security controls across infrastructure, cloud, applications, and endpoints.

Key Responsibilities

• Maintain IT/IS policies aligned with NIST, ISO 27001, UAE CB, and GDPR; ensure audit readiness.
• Lead cybersecurity risk assessments and maintain a dynamic risk framework.
• Design and implement Zero Trust architecture, secure network access, and segmentation.
• Plan and oversee VAPT activities; ensure timely vulnerability remediation.
• Secure cloud and container environments (AWS, Azure, GCP) using DevSecOps practices.
• Manage IAM/PAM, EDR/XDR, patching, DLP, and endpoint security.
• Operate SIEM, SOAR, threat hunting, and incident response.
• Oversee third-party risk management and support audits/regulatory requirements.

Key Skills

• Regulatory compliance (NIST, ISO 27001, UAE CB, PCI DSS)
• Cloud security & DevSecOps (SAST, DAST, SCA, IaC)
• VAPT & vulnerability management
• IAM/PAM, EDR/XDR, SIEM/SOAR
• Zero Trust & network security

Qualifications

• Bachelor's/Master's in IT or Cybersecurity
• 6–10 years of experience (Banking/Fintech preferred)
• Certifications: CISSP, CISM, CISA, CEH, ISO 27001