Senior IT Security Officer: Risk, Incident & Compliance

Financial Audit Authority; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

Financial Audit Authority in Dubai seeks an Information Security Specialist to lead protection of FAA’s digital assets and ensure robust security governance. You will shape strategy, perform risk assessments, respond to incidents, and drive regulatory compliance across the organization.

Collaboration with IT, staff training, and embedding security into business continuity and disaster recovery are essential to safeguard critical information systems.

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity or related field.
• 4–7 years of information security experience.
• Experience in risk management, incident response, and regulatory compliance.

Responsibilities

• Implement and manage FAA’s information security strategy aligned with goals and regulatory compliance.
• Develop and maintain security policies and standards per ISO/IEC 27001 and NIST frameworks.
• Conduct security risk assessments and lead risk treatment planning.
• Coordinate responses to information security incidents and breaches.
• Ensure timely resolution of incidents and apply lessons learned.
• Monitor compliance with data protection laws and external regulations.
• Collaborate with IT to secure systems and address vulnerabilities.
• Design and deliver information security training and awareness programs.
• Prepare regular security reports for management outlining risks and recommendations.
• Integrate information security into business continuity and disaster recovery plans.
• Lead contingency plan development and testing.

Skills

Information security

Risk management

Incident response

Cybersecurity compliance

Security training

Threat monitoring

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree preferred

Job description

Financial Audit Authority in Dubai seeks an Information Security Specialist to lead protection of FAA’s digital assets and ensure robust security governance. You will shape strategy, perform risk assessments, respond to incidents, and drive regulatory compliance across the organization.

Collaboration with IT, staff training, and embedding security into business continuity and disaster recovery are essential to safeguard critical information systems.