Senior Director Information Security

Senior Director Information Security

 Abu Dhabi, United Arab Emirates

 

Permanent

The person appointed will be part of the information Security Team and responsible for the management, implementation and monitoring of secure IT systems and processes in accordance with the approved Enterprise Architecture, IT Strategy and Information Security Policy. IT Security Operations Director is also responsible for the planning and development of the overall security operations for the organization. The IT Security Operations Director will be also responsible for reporting the information security projects to the stakeholders and senior management, develop and report the information security key performance indicators and oversite the information security audits.

•    Lead and manage a team of security professionals, including hiring, training, performance management and KPI setup and monitoring
•    Guide and advise the team to assess and manage existing threats, as well as identified potential new ones
•    Provide guidance and mentorship to team members to manage the department operations and projects
•    Design security programs to mitigate threats before they become real problems. 
•    Monitor and analyze security alerts, incidents, and events to identify potential security threats
•    Coordinate incident response activities with internal and external teams and ensure timely resolution of security incidents
•    Conduct regular security assessments and vulnerability scans and manage the overall threat and risk exposure of the organization to an acceptable level. All in compliance with the corporate security policy, legal, compliance or regulatory requirements making sure remediation of all reported security vulnerabilities are implemented within a pre-agreed timeframe
•    Lead and coordinate incident response efforts, including forensic analysis and reporting as per the company Security Policy followed by determination of root causes and recommendation of corrective actions.
•    Determine and implement the key controls and requirements to prevent data breaches, theft, viruses, and other threats to an organization’s assets, as well as colleague and client information
•    Implement and manage security controls for networks, systems, and applications by directly managing the remediation or coordinating with concerned internal and external team members
•    Oversee the configuration and maintenance of security technologies, including firewalls, intrusion detection/prevention systems, antivirus, antimalware, DLP, NAC and endpoint security
•    Prepare and present regular security reports to executive leadership, highlighting key metrics, incidents, and trends.
•    Provide recommendations for continuous improvement based on security assessments.