Director - Security and Governance (Inception42)

Inception42, a G42 company, is the region\u2019s leading innovator of AI-powered domain-specific as well as industry-agnostic products, built on a rich heritage of research and development. Within the G42 ecosystem, Inception functions as the core intelligence layer \u2013 transforming data and compute infrastructure into real-world, applied AI solutions. Beyond its commercial endeavors, Inception is committed to creating positive societal impact. For more information, please visit www.inception42.ai Inception42, a G42 company, is the region\u2019s leading innovator of AI-powered domain-specific as well as industry-agnostic products, built on a rich heritage of research and development. Within the G42 ecosystem, Inception42 functions as the core intelligence layer \u2013 transforming data and compute infrastructure into real-world, applied AI solutions. Beyond its commercial endeavors, Inception42 is committed to creating positive societal impact. For more information, please visit www.inceptionai.ai Set the direction for security and information security governance across Inception42\u2019s enterprise platforms, cloud services, and product environments. You will own security strategy, risk oversight, control assurance, and security operations, translating business priorities and customer commitments into effective protection. This director role combines executive accountability with technical judgment: building a capable security function, directing investment, and ensuring that security controls work in production. Define and deliver the security strategy, operating model, and prioritised roadmap. Align investment, staffing, tooling, and managed services with material risks, business priorities, and delivery needs. \u2022 Own the information security governance framework, including policies, standards, control ownership, exceptions, and assurance. Maintain practical alignment with ISO 27001, NIST CSF, CIS, and applicable obligations. \u2022 Direct security risk management across enterprise and product environments. Maintain a clear risk register, agree treatment with accountable owners, escalate residual exposure, and ensure risk acceptance follows defined decision authority. \u2022 Provide executive reporting on security posture, material risks, control effectiveness, incident trends, remediation, and investment trade-offs. Make decisions and unresolved exposures clear and actionable. \u2022 Lead the security team, setting responsibilities, performance expectations, development plans, and succession priorities. Build technical capability and accountability across internal teams and managed providers. \u2022 Own security operations outcomes across monitoring, detection engineering, alert triage, investigation, and response. Set coverage and service expectations and challenge the effectiveness of SIEM, EDR, and detection controls. \u2022 Direct the response to major security incidents, coordinating technical containment, investigation, recovery, stakeholder communication, and post-incident review. Ensure corrective actions are completed and validated. \u2022 Govern vulnerability and exposure management, with risk-based prioritisation, accountable remediation owners, agreed service levels, exception handling, and escalation of overdue material risks. \u2022 Own the security compliance and assurance programme, including applicable UAE requirements, ISO 27001 certification activities, customer security commitments, and internal and external audits through verified closure. \u2022 Set security architecture and design review standards for cloud workloads, enterprise systems, and product initiatives. Partner with Engineering on identity, access, workload protection, secure delivery, and operational controls. \u2022 Direct customer security assurance, due diligence, questionnaires, and evidence responses, ensuring commitments accurately reflect implemented controls and agreed remediation plans. \u2022 Govern business continuity and disaster recovery with service owners, aligning recovery objectives, dependencies, failover arrangements, and exercises with business needs. Track test findings to closure. \u2022 Manage security budgets, vendor performance, tooling value, and managed service outcomes. Use evidence of risk reduction and control effectiveness to guide procurement and renewal decisions. \u2022 Build security awareness and shared accountability across the organisation. Embed security reviews and practical control ownership into platform, application, and product change. \u2022 Experience leading an information security function or a substantial security domain, with accountability for strategy, delivery, line management, and measurable improvements in security posture. \u2022 Strong governance, risk, and compliance expertise, including ownership of policy and control frameworks aligned to ISO 27001, NIST CSF, or CIS, and delivery of audit or certification programmes. \u2022 Proven abili

Strong governance, risk, and compliance expertise, including ownership of policy and control frameworks aligned to ISO 27001, NIST CSF, or CIS, and delivery of audit or certification programmes. Experience leading an information security function or a substantial security domain, with accountability for strategy, delivery, line management, and measurable improvements in security posture. Proven ability to direct security risk management across enterprise and product environments, maintain a risk register, and ensure risk treatment with defined decision authority. Experience reporting on security posture, risks, and remediation to executives. Ability to lead security operations, incident response, and disaster recovery planning. Ability to collaborate with engineering, manage budgets and vendor performance, and build security awareness across the organization.

Set the direction for security and information security governance across enterprise platforms, cloud services, and product environments. Own security strategy, risk oversight, control assurance, and security operations. Define and deliver the security strategy, operating model, and prioritised roadmap. Own the information security governance framework (policies, standards, control ownership, exceptions, and assurance). Direct security risk management and maintain a risk register. Provide executive reporting on security posture, risks, and remediation. Lead the security team and manage performance, development, and succession. Own security operations outcomes (monitoring, detection engineering, incident response). Direct response to major security incidents including containment, investigation, recovery, and post-incident review. Govern vulnerability management and escalation of overdue risks. Own security compliance and assurance (UAE requirements, ISO 27001, audits). Set cloud and product security architecture and design review standards. Direct customer security assurance and evidence responses. Govern business continuity and disaster recovery planning and testing. Manage security budgets and vendor performance. Build security awareness and shared accountability across the organization.