Chief Technology Officer

Chief Technology Officer (CTO) Role Summary The Chief Technology Officer (CTO) is a strategic executive responsible for driving Legend Holding Group's technology vision, digital transformation, and enterprise-wide technology enablement. Reporting directly to the Group CEO / Board, the CTO will lead the Group's technology roadmap, platform development, cybersecurity posture, and data-driven innovation to enhance efficiency, scalability, and customer experience across all business units. The role demands a future-oriented, hands-on leader capable of architecting and delivering enterprise systems, digital platforms, and emerging technology initiatives at scale while building a high-performance, security-first technology organization. About Legend Holding Legend Holding Group is a diversified enterprise headquartered in Dubai, operating across the Middle East and African region. With a strong focus on sustainability and innovation, the group manages a growing portfolio of companies in automotive, trading, energy, travel and tourism, and mobility services. Rooted in Loyalty, Excellence, and Progress, we lead innovation and technology to seamlessly connect the physical and digital worlds. Our goal is to become a leader in intelligent, data-driven solutions because Together We Grow. Key Responsibilities 1. Technology Strategy, Innovation & Digital Leadership • Define and execute group-wide technology strategy aligned with business goals. • Establish a future-ready ecosystem (ERP, CRM, AI, Cloud, Apps). • Advise on emerging technologies. • Build a strong tech leadership pipeline. KPIs: Roadmap delivery, innovation index, tech adoption %, BU satisfaction. 2. Enterprise Systems, ERP & Digital Platforms Delivery • Lead ERP, CRM, and enterprise tech rollouts. • Oversee development of consumer apps and BU digital platforms. • Ensure seamless integration and scalability. KPIs: ERP go-live rate, uptime %, integration accuracy %, adoption in 3 months. 3. Technology Infrastructure, Architecture & IT Operations • Ensure secure, stable, scalable IT infrastructure. • Standardize systems architecture. • Optimize IT operations and vendor governance. KPIs: Uptime %, SLA performance, IT cost optimization %, scalability score. 4. Cybersecurity, Data Protection & Compliance • Own and lead the Group's end-to-end cybersecurity strategy, setting the risk appetite, security roadmap, and investment priorities in alignment with business and Board expectations. • Establish an enterprise cyber risk management framework, including regular risk assessments, threat modelling, and vulnerability/penetration testing across all business units. • Design and implement a defense-in-depth security architecture, including network security, endpoint protection, identity & access management (IAM), and progressive adoption of zero-trust principles. • Build and lead a 24/7 security monitoring capability (SOC/SIEM) with defined incident detection, escalation, and response protocols. • Own the cyber incident response and crisis management plan, including post-incident review and continuous improvement. • Implement and test robust Disaster Recovery (DR) and Business Continuity (BCP) plans across critical systems and data. • Ensure full compliance with UAE data protection and cybersecurity requirements — including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) — as well as relevant international standards and frameworks (e.g., ISO 27001, NIST CSF). • Enforce third-party and vendor risk management, ensuring all partners, cloud providers, and integrations meet Group security and data-handling standards. • Champion a group-wide security-first culture through mandatory security awareness training, phishing simulations, and clear accountability at every level. • Report regularly to the CEO, Board, and Audit Committee on the Group's cyber risk posture, incidents, and maturity progress. KPIs: Cyber incident rate, mean time to detect/respond (MTTD/MTTR), audit/compliance score, DR recovery time (RTO/RPO), security maturity index, % staff completing security training. 5. Data, Analytics & Automation • Establish data strategy & governance. • Drive automation, AI, analytics initiatives. • Build predictive insight dashboards. KPIs: Automation ROI, data accuracy, analytics adoption %, decision cycle time. 6. Financial Management & Technology ROI • Manage budgets & tech investments. • Track ROI on initiatives. • Drive cost-efficient modernization. KPIs: ±5% budget delivery, ROI %, annual cost savings. 7. Leadership, Culture & Collaboration • Improve collaboration across units. • Build/mentor tech teams. • Promote innovation culture. KPIs: Engagement score, attrition reduction, leadership milestones. Who Fits the Legend Seat Education • Bachelor's in Computer Science, IT, Engineering. • Master's preferred. Experience • 12–15+ years in tech leadership. • 5+ years in senior/executive roles. • Strong ERP, CRM, cloud, architecture experience. • Proven track record building and leading enterprise-grade cybersecurity and risk management programs. • Exposure to automotive/mobility preferred. Skills • Strategic & hands-on technology leadership. • Deep expertise in platforms, cloud, and analytics. • Strong cybersecurity leadership — risk management, security architecture, incident response, and regulatory compliance. • Strong project delivery & stakeholder management. • Balances innovation with operational excellence. Show more Show less

Education: Bachelor's in Computer Science, IT, or Engineering. Master’s degree preferred. Experience: 12–15+ years in tech leadership; 5+ years in senior/executive roles. Strong ERP, CRM, cloud, and enterprise architecture experience. Proven track record leading enterprise-grade cybersecurity and risk management programs. Exposure to automotive/mobility is preferred.

1. Define and execute group-wide technology strategy aligned with business goals. 2. Lead ERP, CRM, and enterprise tech rollouts; oversee development of consumer apps and BU digital platforms. 3. Ensure secure, stable, scalable IT infrastructure; standardize systems architecture; optimize IT operations and vendor governance. 4. Own cybersecurity strategy, risk management framework, threat modelling, vulnerability testing; build 24/7 security monitoring (SOC/SIEM); incident response and crisis management; disaster recovery and business continuity planning; ensure UAE data protection compliance and ISO/NIST standards. 5. Establish data strategy & governance; drive automation, AI, analytics initiatives; build predictive dashboards. 6. Manage budgets and tech investments; track ROI; drive cost-efficient modernization. 7. Lead and mentor tech teams; promote innovation and cross-unit collaboration.