VP - Information Security, Information Technology

GAL; Abu Dhabi Emirate; On-site; AED 500,000 - 900,000; Full time

Job summary

GAL in Abu Dhabi seeks a VP of Information Security to lead the organization’s security strategy, governance, risk, compliance, and cyber operations. You will protect information assets, enhance resilience, and advise senior leadership on cyber risk and threats.

The role requires building a strong security culture and reporting to executives. You will oversee SOC, incident response, cloud security, IAM, and third-party risk, ensuring security across IT and AI initiatives while aligning with UAE

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Master's degree in a relevant field is preferred.
• Minimum 10-15 years of experience in IT, Information Security, or Cybersecurity.
• Minimum 5 years in a senior leadership role within Information Security or Cybersecurity.
• Strong experience in cybersecurity governance, risk management, compliance, SOC operations, and incident response.
• Experience in regulated or critical sectors such as aviation, defense, government, energy, healthcare, banking, or telecom is preferred.
• Strong knowledge of ISO 27001, NIST, UAE IA/NESA, PDPL, PCI DSS, or similar.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CGEIT, CCSP, or ISO 27001 are preferred.
• Strong leadership, stakeholder management, analytical, and decision-making skills.
• Fluency in English is required; Arabic is an advantage.

Responsibilities

• Lead the enterprise information security strategy, roadmap, policies, and governance framework.
• Oversee cybersecurity risk management, regulatory compliance, audits, and security controls.
• Manage security operations, including SOC oversight, incident response, threat monitoring, and vulnerability management.
• Drive cloud security, data protection, identity and access management, and secure technology adoption.
• Establish and maintain third-party/vendor security risk management practices.
• Support business continuity, disaster recovery, and cyber resilience activities.
• Ensure security is embedded across IT infrastructure, applications, digital transformation, and AI-related initiatives.
• Provide executive-level reporting on cybersecurity risks, security posture, incidents, and remediation plans.
• Lead, coach, and develop information security teams and external security partners.
• Promote cybersecurity awareness and a strong security culture across the organization.

Skills

Security leadership

Governance

Risk management

Strategic planning

Incident response

Cloud security

Third-party risk

Regulatory compliance

Team leadership

Executive communication

Education

Bachelor's degree in IT or related

Master's degree preferred

Tools

ISO 27001

NIST

PDPL

Job description

We are looking for a VP – Information Security to lead the organization’s information security strategy, governance, risk, compliance, and cybersecurity operations.

The role will be responsible for protecting the organization’s information assets, strengthening cybersecurity resilience, and advising senior leadership on cyber risk, security posture, regulatory compliance, and emerging security threats.

Core Responsibilities

• Lead the enterprise information security strategy, roadmap, policies, and governance framework.
• Oversee cybersecurity risk management, regulatory compliance, audits, and security controls.
• Manage security operations, including SOC oversight, incident response, threat monitoring, and vulnerability management.
• Drive cloud security, data protection, identity and access management, and secure technology adoption.
• Establish and maintain third-party/vendor security risk management practices.
• Support business continuity, disaster recovery, and cyber resilience activities.
• Ensure security is embedded across IT infrastructure, applications, digital transformation, and AI-related initiatives.
• Provide executive-level reporting on cybersecurity risks, security posture, incidents, and remediation plans.
• Lead, coach, and develop information security teams and external security partners.
• Promote cybersecurity awareness and a strong security culture across the organization.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Master’s degree in a relevant field is preferred.
• Minimum 10-15 years of experience in IT, Information Security, or Cybersecurity.
• Minimum 5 years in a senior leadership role within Information Security or Cybersecurity.
• Strong experience in cybersecurity governance, risk management, compliance, SOC operations, and incident response.
• Experience in regulated or critical sectors such as aviation, defense, government, energy, healthcare, banking, or telecom is preferred.
• Strong knowledge of frameworks and standards such as ISO 27001, NIST, UAE IA/NESA, PDPL, PCI DSS, or similar.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CGEIT, CCSP, or ISO 27001 are preferred.
• Strong leadership, stakeholder management, analytical, and decision-making skills.
• Fluency in English is required; Arabic is an advantage.