Senior Information Technology Security Officer

Financial Audit Authority; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

Financial Audit Authority in Dubai seeks an Information Security Specialist to lead protection of FAA’s digital assets and ensure robust security governance. You will shape strategy, perform risk assessments, respond to incidents, and drive regulatory compliance across the organization.

Collaboration with IT, staff training, and embedding security into business continuity and disaster recovery are essential to safeguard critical information systems.

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity or related field.
• 4–7 years of information security experience.
• Experience in risk management, incident response, and regulatory compliance.

Responsibilities

• Implement and manage FAA’s information security strategy aligned with goals and regulatory compliance.
• Develop and maintain security policies and standards per ISO/IEC 27001 and NIST frameworks.
• Conduct security risk assessments and lead risk treatment planning.
• Coordinate responses to information security incidents and breaches.
• Ensure timely resolution of incidents and apply lessons learned.
• Monitor compliance with data protection laws and external regulations.
• Collaborate with IT to secure systems and address vulnerabilities.
• Design and deliver information security training and awareness programs.
• Prepare regular security reports for management outlining risks and recommendations.
• Integrate information security into business continuity and disaster recovery plans.
• Lead contingency plan development and testing.

Skills

Information security

Risk management

Incident response

Cybersecurity compliance

Security training

Threat monitoring

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree preferred

Job description

Ensure the protection of FAA’s digital and information assets. Monitor and safeguard the integrity, confidentiality, and availability of the Authority’s information systems. Support the development and implementation of robust information security policies, strategies, and controls, while ensuring compliance with relevant laws, regulations, and internal policies.

Key accountabilities:

• Implement and manage FAA’s information security strategy, ensuring alignment with corporate goals and regulatory compliance.
• Develop and maintain security policies, procedures, and standards, in accordance with. international frameworks (e.g., ISR, ISO/IEC 27001, NIST).
• Conduct regular security risk assessments and audits to identify threats, vulnerabilities and areas for improvement; lead risk treatment planning..
• Manage and coordinate responses to information security incidents and breaches, including investigation, containment, recovery, and post-incident reviews.
• Ensure timely resolution of security incidents, applying lessons learned to strengthen security protocols.
• Monitor and ensure compliance with relevant laws, regulations, and best practices, including data protection laws.
• Assist in external audits and ensure FAA’s adherence to regulatory requirements in information security.
• Collaborate with the IT to ensure all systems are secure and that vulnerabilities are proactively addressed.
• Design and deliver information security training and awareness programs to promote a culture of cybersecurity across all staff and departments.
• Continuously monitor the organization’s information systems to detect and respond to threats in real-time.
• Prepare regular security reports for management and key stakeholders, outlining risks, incidents, and recommendations for improvement.
• Business Continuity and Disaster Recovery:
• Ensure the integration of information security within FAA’s business continuity and disaster recovery plans.
• Lead the development of contingency plans and the testing of these plans to ensure the Authority’s ability to recover from security incidents.

Education:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• A Master’s degree is Preferred.
• 4-7 years of experience in information security or a related field, with proven expertise in risk management, incident response, and cybersecurity compliance.