Information Security - Project Manager

Dicetek LLC; Sharjah; On-site; AED 300,000 - 500,000; Full time

Job summary

Dicetek LLC is seeking an experienced Information Security / Data Protection Project Manager with 6+ years of BFSI-domain experience to lead security projects and risk controls across technology and business lines.

You will guide threat assessments, SDLC security, and regulatory compliance, coordinating with IT, PMO, and vendors to ensure robust controls and timely delivery.

Qualifications

• Engineering degree with 6+ years in Information Security / Data Protection PM in BFSI.
• Hands-on experience leading information security projects.
• Proficient in security design principles, threat assessments, SDLC, firewalls, data protection, vulnerability scanning, and application security.
• Experience managing technology and application risks and controls.
• Expertise in information security & data protection standards (ISO 27001, PCI DSS, UAE IAS, SWIFT CSP, GDPR, UAE Data Protection).
• Strong knowledge of information security, data protection and banking/IT systems.

Responsibilities

• Day-to-day management of information security projects requirements (agile and waterfall) for business applications and technology systems including time, scope, budget.
• Coordinate with IT and PMO process owners to define information security requirements in line with Bank policy.
• Identify and proactively manage project risks and issues.
• Support backlog/requirements gathering and guide prioritization with EPMO/IT/Business teams.
• Ensure solutions adhere to information security policy and regulatory standards.
• Drive control improvements by collaborating with internal security teams and project teams.
• Provide direction to stakeholders to manage risks effectively.
• Contribute to a culture of risk and control awareness.
• Collaborate with Contracts, Vendor Management and Compliance to meet security requirements.
• Oversee budget, staffing, and contracting; coordinate with external vendors/auditors.

Skills

InfoSec

Data Protection

Project Management

Threat Assessments

SDLC

Vulnerability Scanning

Regulatory Compliance

Communication

Problem Solving

Education

Engineering degree

Tools

MS Project

JIRA

SharePoint

Asana

Job description

• An Engineering Degree, with 6+ Years experience in Information Security / Data Protection Project Management in BFSI.
• Hands on experience in leading information security/ cyber security projects.
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Expertise in Information Security & Data Protection standards (like ISO 27001, PCI DSS, UAE IAS, SWIFT CSP, GDPR, UAE Data Protection, etc.).
• Strong knowledge of information Security, Data Protection and Banking / IT Systems.
• Ability to facilitate both technical and business discussions.
• Strong analytical mindset that allows you to deeply understand topics
• Excellent verbal and written communication skills combined with a knack for clear articulation
• Knowledge of Microsoft Office, MS project, MS Share Point, JIRA, Asana or other project management tools
• Certificates such as CISA, CISM, CISSP, Prince 2, PMP RMP, Agile PM, PMI-ACP, etc.

Minimum Qualifications & Skills

• An Engineering Degree, with 6+ Years experience in Information Security / Data Protection Project Management in BFSI.
• Hands on experience in leading information security/ cyber security projects.
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Proficient in application/ technology architectural security design principles, cyber threat assessments, software development life cycle, firewalls, data protection/ security, vulnerability scanning, application security, etc.
• Demonstrated expertise in the management of technology and application risks and controls
• Expertise in Information Security & Data Protection standards (like ISO 27001, PCI DSS, UAE IAS, SWIFT CSP, GDPR, UAE Data Protection, etc.).
• Strong knowledge of information Security, Data Protection and Banking / IT Systems.
• Ability to facilitate both technical and business discussions.
• Strong analytical mindset that allows you to deeply understand topics
• Excellent verbal and written communication skills combined with a knack for clear articulation
• Knowledge of Microsoft Office, MS project, MS Share Point, JIRA, Asana or other project management tools
• Certificates such as CISA, CISM, CISSP, Prince 2, PMP RMP, Agile PM, PMI-ACP, etc.

Job Responsibilities

• Day-to-day management of information security projects requirements (agile and waterfall) for implementation of business applications and technology systems and including time, scope, budget, etc.
• Manage the internal relationship with Information Technology (IT) and PMO process owners supporting the service, assisting with the definition and requirements of Information Security requirements in line with Bank’s Information Security Policy.
• Identification and proactive management of projects risks and issues
• Supporting the EPMO / IT Project Managers to manage the backlog/requirement gathering and guide the team in balancing the priorities and scope
• Ensure the implementation of business applications and technology solutions adhere to bank’s information security policy and regulatory standards by cultivating a strong risk and control environment.
• Drive transparent, quantifiable, and long-lasting control improvements by working together with the internal information security team and other project implementation team like EPMO, IT, Business teams, etc.
• Provide clear direction to business, product, and technology stakeholders so they can manage their risks effectively.
• Contribute to the creation of a culture of risk and control that is centered on proactive awareness of and enhancement of the control environments.
• Work with the Contracts, Vendor Management and Compliance/Business departments to ensure that third-party suppliers contracts and operating-level agreements meet information security requirements.
• Lead and oversee budget, staffing, and contracting
• Work with and manage external vendors / auditors during assessments.