Projects Manager - Policy Section

Dicetek LLC; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Dubai seeks an experienced individual with 8-12 years in cybersecurity governance and risk management. The role involves leading the development of cybersecurity policies, performing risk assessments, and managing internal audits. Ideal candidates possess a Bachelor's degree in IT or Cybersecurity and have deep knowledge of security frameworks like ISO 2700x and NIST CSF. Strong documentation and leadership skills are essential. This position offers a pivotal role in maintaining the firm's security governance.

Qualifications

• 8–12+ years of experience in cybersecurity governance and GRC.
• Deep knowledge of security frameworks such as ISO 2700x and NIST CSF.
• Proven leadership in technical and security-driven environments.

Responsibilities

• Lead development and enforcement of cybersecurity policies.
• Perform ISMS programs and internal audits.
• Conduct cybersecurity risk assessments and manage compliance.

Skills

Cybersecurity governance

Risk management

Leadership

Documentation skills

Education

Bachelor’s degree in IT/Computer Science or Cybersecurity

Job description

Experience:

8–12+ years of experience in cybersecurity governance, GRC including proven leadership in technical and security-driven environments.

Bachelor’s degree in IT/Computer Science, Cybersecurity, or related field (postgraduate qualifications highly regarded).

Deep knowledge of security frameworks (ISO 2700x, NIST CSF), risk management, and security architecture.

Knowledge of ISO 27001, 22301, 20000, PDPL, NIST CSF, CIS controls.

Key Responsibilities:

• Lead development, maintenance, and enforcement of cybersecurity policies, standards, and procedures.
• Perform ISMS programs, internal audits, ISO certification cycles.
• Perform cybersecurity risk assessments, risk treatment plans, and tracking.
• Coordinate BIA, BCP, and DR activities; and ensure alignment with ISO 22301.
• Lead third‑party security assessments, vendor onboarding security validation, and review of PT/MAST/API security scan reports.
• Experience managing audits, risk registers, policies, and compliance programs.
• Strong communication, and documentation skills.