Manager - Information Security

emaratechdubai; United Arab Emirates; On-site; AED 280,000 - 420,000; Full time

Job summary

EmaraTech Dubai seeks a Manager of Information Security to lead policy development, risk management, and business continuity across the organization and its group companies. The role directs security programs, ensures governance, and fosters security awareness while coordinating with senior leadership.

The position requires a minimum 8–10 years of experience in information security, with a focus on policy, compliance, and incident prevention.

Qualifications

• Minimum bachelor's degree in computer science/IT/Engineering.
• Certifications: CISA / CISM / CISSP

Responsibilities

• Guides and directs strategic policies and programs for information security.
• Interacts with senior leadership to align security with business objectives.
• Oversees dissemination of policies, standards and procedures across custodians.
• Leads risk management framework development and assessment.
• Plans for business continuity and disaster recovery; ensures data recovery procedures.
• Manages disaster recovery functions for information systems.
• Prepares department statements and reports.
• Leads team management and resourcing; sets objectives; mentors staff.
• Ensures compliance to quality management procedures and continuous improvement.

Education

Bachelor's degree in Computer Science/IT/Engineering

CISA

CISM

CISSP

Job description

Position Summary

The Manager - Information Security is responsible for Security policy development, program administration and compliance for all information security of the organization and its group companies. The job holder will also be responsible for design and implementation of a risk management and business continuity planning strategy for the organization.

Information Security and Compliance

• Guides and directs strategic policies and programs for all information security of the organization and its group companies.
• Interacts with senior leadership to ensure policies and programs are in line with business objectives and meet the requirements of the business.
• Interacts with key custodians such as system administration teams etc. to oversee dissemination of policies standards and procedures.
• Facilitates and promotes activities to foster information security awareness within the organization.
• Arranges and administers security measures to restrict unauthorized use of data systems and databases.
• Suggests and evaluates alternative/emerging technology with respect to network security.
• Responsible for compliance with respect to policies and programs for information security etc. within the organization.
• Conducts security investigations and executes preventive measures

Responsibility Description Continue.

Risk Management and Business Continuity Planning

• Responsible for the development and assessment of a risk management framework
• Plans for business continuity and disaster recovery in case of system failure and ensures data recovery plans are reviewed periodically.
• Responsible for off-site storage necessary for recovery processes and development of recovery procedures
• Manages disaster recovery functions for information systems

MIS and Reports

• Prepares timely and accurate department statements and reports to meet organization's reporting requirements

Responsibility Description Continue.

Team Management and Resourcing

• Leads these processes effectively – sets individual objectives, recruits qualified staff, manages performance, develops and motivates staff, providing formal and informal feedback / appraisal in order to maximise subordinate and functional performance.
• Mentors development team and providing hands-on technical leadership as required.
• Ensures all employees within the team obtain the necessary level of training.

Responsibility Description Continue.

Quality Management and Continuous Improvement

• Ensures compliance to all relevant quality management procedures and controls to guarantee compliance and delivery of high-quality products/service.
• Stimulates and contributes to the identification of opportunities for continuous improvement of systems, processes and practices taking into account best practices, improvement of business processes, cost reduction and productivity improvement

Responsibility Description Continue..

Policies, Systems, Processes and Procedures

• Ensures and recommends improvements to organizational policies, procedures and processes and implements approved departmental policies, processes, procedures and instructions.
• Understand and embrace the corporate information security framework and perform duties according to the policy, procedures, standards and guidelines

Responsibility Description Continue...

Academic/ Vocational Qualifications

• Minimum bachelor's degree in computer science/IT/Engineering
• Certifications: CISA / CISM / CISSP

Work Experience

• Minimum 8 - 10 years of experience in a similar environment

Work Experience Continue.