Technical Security Manager

Remotedxb; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

Cambium Learning Group is seeking an experienced Information Security Lead to advance the organization's security program across governance, risk, and compliance. You will oversee audits, implement controls, and drive improvements to protect data and systems.

You will collaborate with cross-functional teams, manage risk assessments, and deliver training while ensuring alignment with ISO, GovRAMP, FedRAMP, and privacy laws. This role is based in Dubai and requires hands-on security leadership.

Qualifications

• Bachelor's degree in a related field.
• Minimum 5 years hands-on information security experience.
• Strong knowledge of security/privacy frameworks and best practices.
• Familiarity with GDPR, COPPA, and FERPA.
• Certifications such as CISSP, GIAC, ISACA, or AWS Security.
• Experience with GRC tools and risk assessments.

Responsibilities

• Maintain and mature the information security program to conform with ISO, GovRAMP, FedRAMP, NIST, SOC, CIS Top Controls.
• Coordinate annual external audits and remediation.
• Plan and manage multiple security improvement projects end-to-end.
• Oversee document control and compliance artifacts.
• Lead security awareness and training programs with reporting.
• Support proposals with security/privacy responses.
• Conduct enterprise risk assessments and report to senior management.
• Manage privacy risks related to cookies, APIs, and policy compliance.

Skills

Information security

Security frameworks

Privacy laws

Audits & compliance

Education

Bachelor's degree in Information Security / Cybersecurity / CS / Engineering

Tools

GRC tools

Security assessment tools

Job description

Responsibilities

• Maintain and mature the information security program to ensure conformance to standards including ISO 27001, ISO 27018, ISO 42001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls
• Facilitate annual independent audits by third-party experts, including audit planning, stakeholder coordination, and remediation
• Plan and manage multiple security improvement projects from requirements through implementation
• Manage document and record control processes and maintain compliance artifacts
• Lead Security Awareness and training programs, including content creation and campaign reporting
• Support business development by responding to security and privacy information requests in proposals
• Perform security risk assessments for software acquisitions, technical services, and new technologies
• Administer GRC tools to track security controls and conformance status
• Conduct enterprise risk assessments and report metrics to senior management
• Manage privacy risks related to cookies, APIs, and policy compliance

Requirements

• Bachelor's Degree in Information Security, Cybersecurity, Computer Science, Engineering, or related field
• Minimum 5 years of hands‑on experience in information security
• Deep knowledge of security/privacy frameworks and industry best practices
• Knowledge of privacy laws including GDPR, COPPA, and FERPA
• Proficiency with tools and techniques used to protect against cybersecurity attacks
• Information Security Certifications such as CISSP, GIAC, ISACA, or AWS Security
• Experience with GRC tools
• Demonstrated experience with ISO, GovRAMP, or FedRAMP standards
• Experience conducting risk assessments, gap analysis, and tracking corrective actions

Preferred Qualifications

• PMP certification
• Experience with AI Governance frameworks such as NIST or ISO 42001

About the Company

Cambium Learning Group is an award-winning educational technology solutions leader dedicated to helping all students reach their potential through individualized and differentiated instruction.