Senior Manager Information Security Governance

Beginning of the main content section.Return to the home pagePrintable Format Job Description - Senior Manager Information Security Governance (26001939)Job Description Senior Manager Information Security Governance - (26001939) Job Description About the job The Senior Manager of Governance is responsible for developing the information security and cybersecurity strategy and plan. This role aims to protect DET’s Information assets from risks, threats, and attacks by establishing robust security policies and aligning them with local and federal mandates, such as those from the Dubai Cyber Security Strategy and the Dubai Electronic Security Center. The responsibilities include managing policy implementation, managing risk assessments, delivering training programs, and ensuring compliance across all technology platforms. Conducting investigations on information security policy breaches and recommending solutions. Coordinating with regulatory bodies and stakeholders to maintain and report on DET’s security posture, ensuring a secure operational environment. Core Functional ResponsibilitiesDevelop the DET Group’s information security and cybersecurity strategy and plan in order to mitigate risks, attacks, and threats on the data assets of the DET Group.Design and manage new programs, projects, initiatives, and enhancement and implementation roadmap to strengthen the DET security.Manage the Information Security governance process including Policy and Standards across the DET.Ensure the alignment of the DET Group’s information security and cybersecurity strategy with local and federal strategies, such as the Dubai Cyber Security Strategy, and other requirements set by DESC. Additionally, maintain compliance with the ISO 27001:2022 standard to uphold international best practices in information security management alongside the ISR.Develop and implement of information security and cybersecurity policies, procedures, and standards for the DET Group, ensuring alignment with the ISR as well as leading practices and trends.Manage the provision of awareness and training sessions and program to all employees, leaders, strategic partners, etc. on information security and cyber security policies, to mitigate potential policy breaches.Conduct thorough and ongoing audits to ensure all employees, leaders, and strategic partners strictly adhere to DET's information security and cybersecurity policies. This includes verifying system access compliance, facilitating cybersecurity training, assessing risks, and maintaining detailed audit trails for continuous improvement and accountability.Provide support as needed, to manage any exceptions or deviations from information security and cybersecurity policies.Manage the implementation of information and cybersecurity risk assessments on DET Group, in order to gain intelligence on information security and cyber threats and risks DET is vulnerable to, based on its operations and its IT infrastructure components including applications, cloud, cryptography, and infrastructure, and accordingly recommend risk mitigation measures.Manage investigations on information security policy breaches conducted internally or through external parties, ensure policy breaches are being accurately reported, and accordingly identify solutions to policy breaches.Develop reports pertaining to information security and cybersecurity risk assessments results, as well as incidents related to information security.Ensure reports are being circulated to relevant stakeholders, and manage the delivery of presentations to the Director General as well as the Information Security Committee, as needed.Provide guidance and advice to end users, when needed, regarding potential threats and key considerations for the safe usage of systems and exchange of information.Provide guidance and subject matter expertise when it comes to the enhancement of information security controls, in coordination with the Technology team as well as IT vendors. Qualifications Qualifications & Experience:● Bachelor's degree in Information Security, Information Technology, Cyber Security, Information Management Systems or any related discipline.● Master's degree in information technology, cyber security, Information Management Systems (preferred).● Professional certifications such as Project Management Professional (PMP), CISM – management-focused, CISSP – broad security leadership baseline, CRISC – risk identification & treatment, CGEIT – enterprise IT governance, CISA – audit & controls, CCSK / CCSP – cloud governance, data residency, provider assurance, ISO 22301 LI/LA – business continuity; are advantageous.Certified ISO 27001 lead implementer or lead auditor Job Category: Information SecurityAdvertiser: Department of Economy and TourismEducational-level: BachelorRequired Nationality: UAE Only Suitable for people with determination: NoMonthly Salary: UnspecifiedSchedule-Time: Full timeJob Posting: 01/07/2026Unposting Date:

Educational level: Bachelor's degree. Required nationality: UAE Only. Qualifications: To be filled by the Recruiter.

Develop the DET Group’s information security and cybersecurity strategy and plan to mitigate risks, attacks, and threats on data assets; design and manage programs, projects, initiatives, and roadmaps to strengthen DET security; manage the Information Security governance process including policy and standards; ensure alignment with local/federal strategies (Dubai Cyber Security Strategy, DESC) and ISO 27001:2022; develop and implement information security policies, procedures, and standards; manage awareness and training; conduct audits to ensure adherence and maintain audit trails; provide risk assessments and recommend mitigations; manage investigations of policy breaches; develop risk assessment reports and present to stakeholders including Director General and Information Security Committee; provide guidance to end users on threat considerations; advise on enhancement of information security controls in coordination with Technology and IT vendors.