Senior Information Technology Security Officer

Tanqeeb; Dubai; On-site; AED 280,000 - 480,000; Full time

Job summary

FAA in Dubai seeks an Information Security Lead to safeguard digital assets, drive compliance, and steer the organization’s security program. You will design policy frameworks, oversee risk management, and lead incident response initiatives across all IT environments.

You will coordinate audits, deliver staff training, monitor threats in real time, and report findings to senior management to strengthen resilience and business continuity.

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity or related field.
• Master’s degree preferred.
• 4–7 years of information security experience.

Responsibilities

• Implement and manage FAA’s information security strategy and ensure regulatory compliance.
• Develop and maintain security policies, procedures, and standards per international frameworks (ISR, ISO/IEC 27001, NIST).
• Conduct regular risk assessments and audits to identify threats and lead risk treatment planning.
• Manage and coordinate responses to information security incidents, including investigation, containment, and recovery.
• Ensure timely resolution of security incidents and apply lessons learned to strengthen controls.
• Monitor compliance with laws and data protection requirements; assist in external audits.
• Collaborate with IT to secure systems and proactively address vulnerabilities.
• Design and deliver information security training and awareness programs.
• Continuously monitor information systems to detect and respond to threats in real time.
• Prepare regular security reports for management outlining risks and improvements.

Skills

Information security

Risk management

Incident response

Regulatory compliance

Policy development

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree preferred

Job description

Overall purpose:

Ensure the protection of FAA’s digital and information assets. Monitor and safeguard the integrity, confidentiality, and availability of the Authority’s information systems. Support the development and implementation of robust information security policies, strategies, and controls, while ensuring compliance with relevant laws, regulations, and internal policies.

Key accountabilities:

• Implement and manage FAA’s information security strategy, ensuring alignment with corporate goals and regulatory compliance.
• Develop and maintain security policies, procedures, and standards, in accordance with. international frameworks (e.g., ISR, ISO/IEC 27001, NIST).
• Conduct regular security risk assessments and audits to identify threats, vulnerabilities and areas for improvement; lead risk treatment planning..
• Manage and coordinate responses to information security incidents and breaches, including investigation, containment, recovery, and post-incident reviews.
• Ensure timely resolution of security incidents, applying lessons learned to strengthen security protocols.
• Monitor and ensure compliance with relevant laws, regulations, and best practices, including data protection laws.
• Assist in external audits and ensure FAA’s adherence to regulatory requirements in information security.
• Collaborate with the IT to ensure all systems are secure and that vulnerabilities are proactively addressed.
• Design and deliver information security training and awareness programs to promote a culture of cybersecurity across all staff and departments.
• Continuously monitor the organization’s information systems to detect and respond to threats in real-time.
• Prepare regular security reports for management and key stakeholders, outlining risks, incidents, and recommendations for improvement.

Business Continuity and Disaster Recovery:

Ensure the integration of information security within FAA’s business continuity and disaster recovery plans. Lead the development of contingency plans and the testing of these plans to ensure the Authority’s ability to recover from security incidents.

Education:

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field. A Master’s degree is Preferred.

Minimum Experience:

4-7 years of experience in information security or a related field, with proven expertise in risk management, incident response, and cybersecurity compliance.