IT Infrastructure, Cloud and Cybersecurity Manager

Naffco; Abu Dhabi; On-site; AED 400,000 - 680,000; Full time

Job summary

Naffco in Abu Dhabi seeks a seasoned Manager – Network, Cloud and Cybersecurity to lead the organisation’s IT network, cloud infrastructure and cyber security operations. The role ensures secure, resilient, scalable systems aligned with business needs and oversees architecture, governance and transformation programs.

The position requires strong technical breadth across enterprise networks, hybrid clouds and cybersecurity, plus proven leadership to drive strategy and delivery across multiple

Qualifications

• Minimum 10–15 years of progressive experience in IT infrastructure, networking, cloud or cybersecurity.
• At least 5 years in a managerial or technical leadership role.
• Experience with hybrid or multi-cloud environments and SOC/MSSP engagements.
• Proven ability to lead IT transformation projects and vendor management.

Responsibilities

• Lead enterprise network, cloud and cybersecurity operations across multiple locations.
• Oversee network infrastructure design, security, redundancy and performance.
• Drive cloud strategy, governance and cost optimisation for Azure/AWS/GCP.
• Direct security monitoring, incident response and vulnerability programmes.
• Manage IAM, SSO, MFA, AD and Entra ID access controls.
• Ensure compliance with ISO 27001, NIST, ITIL and related standards.

Skills

Leadership

Hybrid/multi-cloud

Cybersecurity governance

Identity and access management

IT security operations

Education

Bachelor in Computer Science / Information Technology

Master in IT/Cybersecurity (advantage)

Tools

Azure

AWS

GCP

Microsoft Entra ID

Active Directory

Job description

Job description

Job Summary: The Manager – Network, Cloud and Cybersecurity is responsible for leading the organisation’s enterprise network, cloud infrastructure and cybersecurity operations. The role ensures that IT systems are secure, resilient, scalable and aligned with business requirements.

The position will oversee network architecture, hybrid and multi-cloud environments, cybersecurity governance, identity and access management, security monitoring, disaster recovery, technology vendors and infrastructure transformation projects. The role requires a strong combination of technical expertise, strategic planning and team leadership.

Key Responsibilities

Network Infrastructure Management

• Lead the design, implementation and management of enterprise network infrastructure across offices, factories, data centres and remote locations.
• Manage LAN, WAN, WLAN, SD-WAN, VPN, routing, switching, firewalls and internet connectivity.
• Ensure network availability, performance, redundancy and security across all business locations.
• Monitor network performance and resolve recurring availability, latency and capacity issues.
• Implement network segmentation, secure remote access and appropriate firewall policies.
• Manage network transformation, consolidation and optimisation projects.
• Maintain accurate network diagrams, configurations, inventories and technical documentation.

Cloud Infrastructure Management

• Develop and implement the organisation’s cloud and hybrid infrastructure strategy.
• Manage cloud environments across Microsoft Azure, AWS, GCP or other approved platforms.
• Lead the migration of suitable on-premises systems and services to cloud platforms.
• Manage cloud networking, virtual machines, storage, backup, disaster recovery and identity services.
• Ensure cloud environments are secure, scalable, cost-effective and compliant with organisational policies.
• Monitor cloud consumption, licensing and costs and recommend optimisation opportunities.
• Establish cloud governance standards covering access, security, configuration, monitoring and resource management.
• Manage Microsoft 365, Azure Active Directory or Microsoft Entra ID and related collaboration platforms.

Cybersecurity Management

• Develop and implement cybersecurity strategies, policies, procedures and technical controls.
• Manage Security Operations Centre and Managed Security Service Provider activities.
• Oversee Security Information and Event Management, endpoint protection and threat-monitoring solutions.
• Lead vulnerability assessments, penetration testing and remediation programmes.
• Manage cybersecurity incidents, investigations, containment, recovery and post-incident reviews.Implement and monitor firewalls, intrusion detection and prevention systems, email security, web application firewalls and endpoint security.
• Oversee data‑loss prevention, information classification, encryption and cloud‑security controls.
• Conduct cybersecurity risk assessments and maintain risk and remediation registers.
• Coordinate security‑awareness programmes, phishing simulations and employee training.

Identity and Access Management

• Establish and maintain identity and access‑management processes.
• Manage Active Directory, Microsoft Entra ID, Single Sign‑On and Multi‑Factor Authentication.
• Ensure appropriate role‑based access controls and privileged‑access management.
• Conduct periodic user‑access reviews and ensure timely access removal during employee offboarding.
• Strengthen access controls for business applications, infrastructure, cloud services and third‑party users.

Governance Risk and Compliance

• Develop and maintain IT security policies, standards and operating procedures.
• Ensure alignment with applicable cybersecurity, data‑protection and privacy requirements.Support certification and compliance programmes such as ISO 27001, ISO 20000, NIST or other relevant frameworks.
• Coordinate internal and external audits and ensure timely closure of identified findings.
• Evaluate technology and security risks associated with vendors, systems and new projects.
• Provide regular risk, compliance and cybersecurity reports to senior management.

Business Continuity and Disaster Recovery

• Develop and maintain IT disaster‑recovery and business‑continuity plans.
• Ensure critical systems, network services and business data are adequately backed up and recoverable.
• Conduct periodic disaster‑recovery testing and document the results and improvement actions.
• Define recovery time and recovery point objectives in coordination with business stakeholders.
• Ensure infrastructure resilience, high availability and appropriate system redundancy.

IT Operations and Service Management

• Ensure network, cloud and security services meet agreed service levels and business requirements.
• Manage incidents, problems, changes, service requests, configuration items and IT assets in accordance with ITIL practices.
• Establish monitoring and reporting for the health, capacity and availability of infrastructure and security systems.
• Identify recurring operational issues and implement permanent corrective actions.
• Support critical incidents and participate in after‑hours escalation when required.

Projects and Digital Transformation

• Lead network, cloud, data‑centre and cybersecurity transformation projects.
• Prepare project scopes, technical specifications, statements of work, bills of quantities and implementation plans.
• Evaluate proposed technologies and recommend appropriate technical solutions.
• Coordinate system testing, migration, deployment, documentation and operational handover.
• Ensure projects are completed within the approved scope, budget and timeline.

Vendor and Budget Management

• Manage relationships with cloud providers, telecom operators, cybersecurity partners and managed‑service providers.
• Develop RFPs, review proposals and conduct technical and commercial evaluations.
• Monitor vendor performance against contracts, service‑level agreements and project deliverables.
• Prepare and manage operational and capital budgets for network, cloud and cybersecurity requirements.
• Identify opportunities to reduce costs while maintaining security, service quality and operational resilience.

Team Leadership

• Lead, coach and develop network, cloud, infrastructure and cybersecurity team members.
• Define team objectives, responsibilities, performance measures and development plans.
• Coordinate internal teams and external service providers during incidents and projects.
• Promote a culture of security, accountability, continuous improvement and knowledge sharing.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering or a related discipline.
• A master’s degree in Information Technology, Cybersecurity or Business Administration would be an advantage.
• Relevant professional certifications are strongly preferred, such as:
• CCNP, CCIE or equivalent networking certification
• Microsoft Azure Administrator, Solutions Architect or Security certification
• AWS Solutions Architect or Security certification
• CISSP, CISM, CCSP, CEH or equivalent cybersecurity certification
• ISO 27001 Lead Implementer or Lead Auditor
• ITIL certification
• TOGAF certification

Experience Requirements

• Minimum 10–15 years of progressive experience in IT infrastructure, enterprise networking, cloud technologies or cybersecurity.
• At least 5 years of experience in a managerial or technical leadership position.
• Strong experience managing enterprise networks across multiple locations.
• Demonstrated experience with hybrid or multi‑cloud environments, preferably Azure and AWS.
• Experience managing SOC, MSSP, SIEM, VAPT and cybersecurity incident‑response activities.
• Experience with identity and access management, Microsoft 365, Active Directory and Microsoft Entra ID.
• Proven experience delivering infrastructure, cloud, network or cybersecurity transformation projects.
• Experience managing vendors, managed services, technology budgets and service‑level agreements.
• UAE or GCC experience within a large multi‑site organisation would be preferred.

Technical Competencies

• Enterprise routing, switching, wireless networking and SD‑WAN
• Firewalls, VPN, IDS/IPS, proxy and web application firewall
• Microsoft Azure, AWS and hybrid‑cloud architecture
• Microsoft 365, Active Directory and Microsoft Entra ID
• SIEM, SOC operations and managed‑security services
• Endpoint detection and response and endpoint protection
• Vulnerability assessment and penetration testing
• Identity and access management, SSO and MFA
• Data‑loss prevention and information classification
• Virtualisation technologies such as VMware and Hyper‑V
• Backup, disaster recovery and high‑availability solutions
• Infrastructure and security monitoring platforms
• ISO 27001, NIST, ITIL and security‑risk‑management practices
• IT asset, incident, problem, change and configuration management