Information Security - Project Manager

Dicetek LLC; Sharjah; On-site; AED 40,000 - 60,000; Full time

Job summary

A leading technology consultancy is seeking an experienced Project Manager specializing in Information Security to oversee cybersecurity projects. The ideal candidate will have an Engineering Degree along with over 6 years in data protection project management and must possess strong skills in risk management and communication. This role involves day-to-day management of project requirements, collaboration with internal IT teams, and ensuring adherence to security policies and standards.

Qualifications

• 6+ years of experience in Information Security/Data Protection Project Management.
• Hands-on experience leading security/cybersecurity projects.
• Knowledge of Information Security standards like ISO 27001, PCI DSS, GDPR.

Responsibilities

• Manage day-to-day information security project requirements.
• Support internal IT and PMO in defining security requirements.
• Identify and manage project risks and issues.

Skills

Information Security

Data Protection

Project Management

Cyber Security

Analytical Skills

Communication Skills

Education

Engineering Degree

Tools

JIRA

Asana

Microsoft Office

Job description

Designation

Project Manager – Information Security

Minimum Qualifications & Skills

• An Engineering Degree, with 6+ Years experience in Information Security / Data Protection Project Management in BFSI.
• Hands on experience in leading information security/ cyber security projects.
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Proficient in application/ technology architectural design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Expertise in Information Security & Data Protection standards (like ISO 27001, PCI DSS, UAE IAS, SWIFT CSP, GDPR, UAE Data Protection, etc.).
• Strong knowledge of information Security, Data Protection and Banking / IT Systems.
• Ability to facilitate both technical and business discussions.
• Strong analytical mindset that allows you to deeply understand topics
• Excellent verbal and written communication skills combined with a knack for clear articulation
• Knowledge of Microsoft Office, MS project, MS Share Point, JIRA, Asana or other project management tools
• Certificates such as CISA, CISM, CISSP, Prince 2, PMP RMP, Agile PM, PMI-ACP, etc.

Job Responsibilities

• Day-to-day management of information security projects requirements (agile and waterfall) for implementation of business applications and technology systems and including time, scope, budget, etc.
• Manage the internal relationship with Information Technology (IT) and PMO process owners supporting the service, assisting with the definition and requirements of Information Security requirements in line with Bank’s Information Security Policy.
• Identification and proactive management of projects risks and issues
• Supporting the EPMO / IT Project Managers to manage the backlog/requirement gathering and guide the team in balancing the priorities and scope
• Ensure the implementation of business applications and technology solutions adhere to bank’s information security policy and regulatory standards by cultivating a strong risk and control environment.
• Drive transparent, quantifiable, and long-lasting control improvements by working together with the internal information security team and other project implementation team like EPMO, IT, Business teams, etc.
• Provide clear direction to business, product, and technology stakeholders so they can manage their risks effectively.
• Contribute to the creation of a culture of risk and control that is centered on proactive awareness of and enhancement of the control environments.
• Work with the Contracts, Vendor Management and Compliance/Business departments to ensure that third-party suppliers contracts and operating-level agreements meet information security requirements.
• Lead and oversee budget, staffing, and contracting
• Work with and manage external vendors / auditors during assessments.