Security Manager – Orient | Group Tech &Dig Platforms | Corporate Services

Jobsatdubai; Dubai; On-site; AED 334,800 - 502,200; Full time

Job summary

Jobsatdubai is seeking an Information Security Manager to drive compliance and manage information risk strategies. The role requires at least 8 years of experience, particularly within insurance or banking environments, and involves collaboration with various departments to enhance cybersecurity measures.

The successful candidate will hold relevant certifications, a degree in Engineering or equivalent, and possess extensive knowledge of IT security management frameworks and regulatory requirements in UAE.

Qualifications

• Minimum of 8 years of experience in the IT or Information risk domain.
• Knowledge of International Standards such as UAE‑IA, ADHICS, ISO, PCI‑DSS, ITIL, COBIT, NIST.
• Knowledge of current cybersecurity threats, vulnerabilities, and trends.

Responsibilities

• Identify and assess risks to information assets.
• Monitor and ensure compliance with applicable laws and regulations.
• Collaborate with IT, HR, legal, and audit teams for security integration.

Skills

Insurance or banking experience

ADHICS Audit passing

Communications & Negotiation skills

Stakeholder, program & Vendor management

Education

Degree in Engineering or equivalent

CISSP, CISM, CISA, CGRC, GRCP, ISO 27001 LA/LI certifications

Tools

IT Security Management

Risk Management

Job description

Job Requisition ID:[[167114]]

Overview of the role:

As a crucial member of the information Governance Risk and Compliance (iGRC) subfunction within the CISO office, the Information Security Manager will be responsible for developing, implementing, and overseeing information risk management strategies to safeguard our organization’s information assets and mitigate cybersecurity threats in line with Al‑Futtaim Group Information Risk Management and Enterprise Risk Management processes and standards as well as regulatory requirements. The role requires strong leadership skills, extensive experience in cybersecurity and risk management, deep knowledge of the regulatory requirements of insurance entities within UAE, and the ability to drive collaboration across departments to ensure the highest level of security and compliance.

What you will do:

• Risk Management Identify and assess risks to information assets, develop and implement strategies to mitigate them, and continuously monitor the effectiveness of risk management processes.
• Compliance Management Monitor and ensure compliance with applicable laws, regulations, and standards related to information governance and data protection. Stay updated on changes in regulatory requirements and industry best practices. Develop and implement compliance programs and initiatives, including training and awareness programs.
• Stakeholder Engagement Collaborate with IT, HR, legal, and audit teams to integrate security measures across all departments, ensuring that all aspects of the organization adhere to compliance standards. Facilitate communication and coordination to address security concerns and uphold regulatory requirements.
• Third Party Risk Assessment Identify and conduct third party risk assessment on all our critical third‑party vendors.
• Audit Management Planning, execution, and oversight of audit activities (internal, external, regulatory, etc.) within the organization to ensure compliance, identify risks, and drive continuous improvement.
• Client Risk Assessments Conduct various client risk assessments carried out by our supporting clients on our infrastructure setup, addressing all sections on security controls, data protection, compliance, and business continuity.
• Conduct and report risk assessment and compliance check as per cycle.

Required Skills to be successful:

• Insurance or banking experience
• ADHICS Audit passing
• Minimum of 8 years experience
• Communications & Negotiation skills
• Stakeholder, program & Vendor management

About the Team:

You will be reporting to Manager Information GRC.

What equips you for the role:

• Degree in Engineering or equivalent. Should have at least one of the following certifications: CISSP, CISM, CISA, CGRC, GRCP, ISO 27001 LA/LI
• Minimum of 8 years of experience in the IT or Information risk domain. Knowledge on International Standards such as UAE‑IA, ADHICS, ISO, PCI‑DSS, ITIL, COBIT, NIST, etc.
• Compliance and Regulatory Knowledge (UAE‑Information Assurance and ADHICS)
• Knowledge of current cybersecurity threats, vulnerabilities, and trends.
• Expertise in creating and enforcing security policies, procedures, and guidelines.
• Knowledge of IT infrastructure, including networks, systems, and applications.

Leadership:

• Guiding strong IT and business team with security initiatives
• Engagement with senior Business executives with ability to influence

Functional:

• Risk Management
• Solution design
• IT Security Management

Advanced:

• Service Management
• IT Project Management
• IT Vendor Management
• Infrastructure and Technology

Proficient:

• Business Process Design
• Application Implementation