Senior Cybersecurity & Governance Specialist

Confidential; Dubai; Presencial; AED 420.000 - 660.000; Jornada completa

Descripción de la vacante

Confidential is seeking a seasoned cybersecurity leader to strengthen governance, risk management, and security operations across on-prem, cloud, and SaaS. You will oversee SOC/SIEM, incident response, and validation of security controls.

Responsibilities include ISO/IEC 27001 ISMS, vulnerability management, DLP, PAM/PIM, Zero Trust, and AI security governance. Strong communication with stakeholders and governance reporting required.

Formación

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, or related field.
• 5+ years of relevant cybersecurity experience in a large enterprise environment.
• Hands-on knowledge of SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management and incident response.
• Strong knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure, and cloud security.

Responsabilidades

• Manage and strengthen cybersecurity operations, SOC, SIEM and incident response.
• Support ISO/IEC 27001 ISMS, policies, risk assessments, audits and compliance.
• Lead vulnerability management, security assessments, and remediation tracking.
• Implement DLP, PAM/PIM, identity security, Zero Trust and privileged-access controls.
• Assess security across Microsoft 365, Azure, Oracle Cloud, SaaS, databases, and on-premises.
• Conduct third-party/vendor security assessments and track risks.
• Support AI security and governance, including enterprise AI controls.
• Review security requirements for new IT projects and implementations.
• Support cyber resilience, BCP and disaster recovery planning.
• Maintain security dashboards and report risks and progress to management.

Conocimientos

SOC/SIEM

Incident Response

Security Governance

ISO/IEC 27001

Vulnerability Management

DLP

PAM/PIM

Zero Trust

Cloud Security

AI Security Governance

Educación

Bachelor's degree in Cybersecurity/Information Security/Computer Science/IT

Herramientas

SIEM tools

EDR/XDR

Microsoft security technologies

Azure security tooling

Cloud security platforms

Descripción del empleo

Department: Information Technology

Location: Dubai, UAE

Industry: Diversified Conglomerate, Contracting & Engineering Sector

Job Purpose

Responsible for strengthening the organization’s cybersecurity posture by managing security operations, governance, risk, compliance, and key security improvement projects across on-premises, cloud, Microsoft 365, Oracle, and enterprise applications. Must have hands‑on cybersecurity experience with governance and risk management.

Key Responsibilities

• Manage and enhance cybersecurity operations, SOC, SIEM and incident response.
• Support ISO/IEC 27001 ISMS, security policies, risk assessments, audits, and compliance activities.
• Manage vulnerability management, security assessments, penetration testing, and remediation tracking.
• Implement and improve DLP, PAM/PIM, identity security, Zero Trust, and privileged-access controls.
• Assess and strengthen security across Microsoft 365, Azure, Oracle Cloud (OCI), SaaS, applications, databases, and on-premises infrastructure.
• Conduct third‑party/vendor security assessments and track identified risks.
• Support AI security and governance, including ISO/IEC 42001 and controls around enterprise AI platforms.
• Review security requirements for new IT projects, applications, and technology implementations.
• Support cybersecurity requirements for BCP, Disaster Recovery, and cyber resilience.
• Maintain security dashboards and report key risks, incidents, vulnerabilities, compliance gaps, and project progress to management.

Key Projects

SOC/SIEM | ISO 27001 | DLP | PAM/PIM | Cloud Security | AI Security & Governance | Vulnerability Management | Incident Response | Vendor Risk | Application & Database Security | Cyber Resilience

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or related field.
• 5+ years of relevant cybersecurity experience, preferably within a large enterprise environment.
• Hands‑on knowledge of SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management, and incident response.
• Good knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure, Microsoft 365, and cloud security.
• Strong analytical, communication, documentation, and stakeholder‑management skills.

Preferred Certifications

CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer/Lead Auditor, Microsoft Cybersecurity certifications, or equivalent.

Key Competencies

• Cybersecurity and risk management
• Security governance and compliance
• Incident and vulnerability management
• Cloud and enterprise security
• Vendor/security assessment
• Project ownership
• Strong communication and collaboration