Senior Manager, Security Operations & Incident Response

Commercial Bank of Dubai; Dubai; On-site; AED 420,000 - 660,000; Full time

Job summary

Commercial Bank of Dubai seeks a Senior Manager, Security Operations & Incident Management to lead the SOC and incident response, ensuring protection of data and systems across the UAE. This role supports the CISO office and champions resilient security programs bank-wide.

Ideal candidates have 10+ years in information security in banking, with leadership experience, strong ISO 27001/NIST knowledge, and proven threat modelling and risk-based decision making.

Qualifications

• Bachelor's degree in a computing or information security field is required.
• CISSP and/or CISM certifications are highly desirable.
• Strong knowledge of security frameworks (ISO 27001, NIST) and regulatory requirements.
• Experience in end-to-end security incident management.
• Proven leadership and ability to coordinate across SOC/IT teams.

Responsibilities

• Oversee Security Operations Center daily operations and monitoring strategies.
• Own the incident response plan and lead investigations and remediation.
• Coordinate with internal/external stakeholders during incidents, including after-action reviews.
• Develop and maintain threat intelligence program and translate it into risk decisions.
• Support risk assessments, vulnerability analysis, and regulatory reporting.

Skills

Leadership

Security incident management

Threat intelligence

Communication

Regulatory compliance

Education

Bachelor's degree in Computer Science / Information Security

CISSP

CISM

Tools

ISO 27001

NIST

MITRE ATT&CK

STRIDE

OWASP

Job description

Commercial Bank of Dubai seeks a Senior Manager, Security Operations & Incident Management to lead the SOC and incident response, ensuring protection of data and systems across the UAE. This role supports the CISO office and champions resilient security programs bank-wide.

Ideal candidates have 10+ years in information security in banking, with leadership experience, strong ISO 27001/NIST knowledge, and proven threat modelling and risk-based decision making.