VP - Information Security, Information Technology

GAL; Abu Dhabi; On-site; AED 600,000 - 900,000; Full time

Job summary

GAL is seeking a Vice President of Information Security to lead the organization’s information security strategy, governance, risk, compliance, and cybersecurity operations. The role will protect information assets, strengthen cyber resilience, and advise senior leadership on cyber risk, security posture, regulatory compliance, and emerging threats.

You will direct enterprise security strategy, risk management, audits, SOC operations, and incident response, while advancing cloud security, data

Qualifications

• Demonstrated experience leading information security strategy and governance.
• Strong regulatory knowledge across UAE IA/NESA, PDPL, ISO 27001, NIST and PCI DSS.
• Proven ability to lead security operations, risk management, and audits.

Responsibilities

• Lead enterprise information security strategy, roadmap, policies, and governance.
• Oversee risk management, regulatory compliance, audits, and security controls.
• Manage security operations including SOC oversight, incident response, and threat monitoring.
• Drive cloud security, data protection, IAM, and secure technology adoption.
• Establish third-party security risk management practices.
• Support business continuity, disaster recovery, and cyber resilience.
• Ensure security across IT, applications, digital transformation, and AI initiatives.
• Provide executive-level reporting on cybersecurity risks and remediation plans.
• Lead and develop information security teams and external partners.
• Promote cybersecurity awareness and a strong security culture.

Skills

Information security leadership

Governance & risk management

Regulatory compliance

SOC operations

Incident response

Cloud security

Identity and access management

Vendor risk management

Business continuity

Executive reporting

Team leadership

Stakeholder management

Fluent English

Arabic language (advantageous)

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field

Master's degree in a relevant field (preferred)

Certifications: CISSP, CISM, CISA, CRISC, CCSP, ISO 27001

Job description

About the Role

We are looking for a VP - Information Security to lead the organization's information security strategy, governance, risk, compliance, and cybersecurity operations.

The role will be responsible for protecting the organization's information assets, strengthening cybersecurity resilience, and advising senior leadership on cyber risk, security posture, regulatory compliance, and emerging security threats.

Core Responsibilities

• Lead the enterprise information security strategy, roadmap, policies, and governance framework.
• Oversee cybersecurity risk management, regulatory compliance, audits, and security controls.
• Manage security operations, including SOC oversight, incident response, threat monitoring, and vulnerability management.
• Drive cloud security, data protection, identity and access management, and secure technology adoption.
• Establish and maintain third-party/vendor security risk management practices.
• Support business continuity, disaster recovery, and cyber resilience activities.
• Ensure security is embedded across IT infrastructure, applications, digital transformation, and AI-related initiatives.
• Provide executive-level reporting on cybersecurity risks, security posture, incidents, and remediation plans.
• Lead, coach, and develop information security teams and external security partners.
• Promote cybersecurity awareness and a strong security culture across the organization.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Master's degree in a relevant field is preferred.
• Minimum 10-15 years of experience in IT, Information Security, or Cybersecurity.
• Minimum 5 years in a senior leadership role within Information Security or Cybersecurity.
• Strong experience in cybersecurity governance, risk management, compliance, SOC operations, and incident response.
• Experience in regulated or critical sectors such as aviation, defense, government, energy, healthcare, banking, or telecom is preferred.
• Strong knowledge of frameworks and standards such as ISO 27001, NIST, UAE IA/NESA, PDPL, PCI DSS, or similar.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CGEIT, CCSP, or ISO 27001 are preferred.
• Strong leadership, stakeholder management, analytical, and decision-making skills.
• Fluency in English is required; Arabic is an advantage.