ISMS Officer – Information Security Governance & Compliance | Dubai, UAE

Uasmart; Dubai; On-site; AED 260,000 - 360,000; Full time

Job summary

Uasmart is seeking an experienced ISMS Officer in Dubai to lead the Information Security Management System implementation, governance, and continual improvement across the organization. The role focuses on maintaining ISO 27001 compliance, coordinating risk assessments, audits, and incident response activities.

The successful candidate will drive security policy development, risk treatment, and governance reporting, working with DESC and multiple stakeholders to ensure ongoing information

Qualifications

• Experience with ISO 27001 and information security governance.
• Hands-on ISMS implementation, maintenance, and continual improvement.
• Strong ability to conduct risk assessments and coordinate audits.
• Excellent stakeholder communication and governance reporting.

Responsibilities

• Lead ISMS implementation, maintenance, and continual improvement.
• Develop and review information security policies and governance processes.
• Coordinate information security risk assessments and risk treatment activities.
• Coordinate internal and external information security audits and DESC liaison.
• Support incident response, SOC activities, vulnerability remediation, and security awareness.

Skills

ISO 27001

ISMS implementation

Risk assessments

Internal & external audits

Stakeholder coordination

Job description

Location

Dubai, United Arab Emirates

Job Category

Information Technology (IT) & Software
Legal & Compliance
Security & Defence

Job Overview

We are seeking an experienced ISMS Officer to lead Information Security Management System implementation, governance, compliance, and continual improvement activities in Dubai. The role is focused on strengthening information security governance, maintaining compliance with applicable standards and requirements, and ensuring that the organization’s information security management processes remain effective and continuously improved.

The successful candidate will be responsible for supporting security policies, risk assessments, risk treatment, internal and external audits, and ISMS maintenance. The position requires a strong understanding of ISO standards, particularly ISO 27001, as well as practical experience coordinating information security activities across multiple stakeholders.

The role also involves coordination across incident response, SOC activities, vulnerability remediation, security awareness programs, and Information Security Regulation requirements. This opportunity is well suited to an information security professional seeking career growth in governance, risk, compliance, and information security management.

Key Responsibilities

• Lead and support the implementation, maintenance, and continual improvement of the Information Security Management System.
• Develop, maintain, and review information security policies and governance processes.
• Conduct and coordinate information security risk assessments.
• Support risk treatment activities and monitor associated actions.
• Coordinate internal and external information security audits.
• Ensure ongoing alignment with ISO standards, particularly ISO 27001.
• Coordinate information security incident response activities.
• Work with SOC teams on relevant security monitoring and operational activities.
• Coordinate vulnerability remediation activities with relevant technical teams.
• Support and coordinate information security awareness programs.
• Support compliance with Information Security Regulation requirements.
• Coordinate relevant information security activities with the Dubai Electronic Security Centre (DESC).
• Prepare security governance reports and management presentations.
• Coordinate with internal and external stakeholders on information security requirements and compliance matters.

Requirements & Qualifications

• Minimum 5 years of experience in information security compliance and governance.
• ISO certification with a clear understanding of ISO standards, particularly ISO 27001.
• Hands‑on experience implementing, maintaining, and continually improving an ISMS.
• Experience developing and managing security policies.
• Strong experience with information security risk assessments and risk treatment.
• Experience coordinating internal and external information security audits.
• Understanding of incident response and SOC activities.
• Experience coordinating vulnerability remediation.
• Experience supporting security awareness programs.
• Understanding of Information Security Regulation (ISR) requirements.
• Experience or knowledge of coordination with the Dubai Electronic Security Centre (DESC).
• Strong reporting and presentation skills.
• Excellent stakeholder coordination and communication abilities.

Salary, Benefits & Career Growth

Salary and specific compensation details have not been provided for this position.

This role provides an opportunity for professional development across information security governance, ISO 27001, ISMS implementation, risk management, audit coordination, regulatory compliance, incident response, and security operations. Relevant ISO, information security governance, risk, and compliance certifications and ongoing professional training can support long‑term career growth in information security management.