Senior Cybersecurity & Governance Specialist

Department: Information Technology Location: Dubai, UAE Industry: Diversified Conglomerate, Contracting & Engineering Sector Job Purpose Responsible for strengthening the organization’s cybersecurity posture by managing security operations, governance, risk, compliance, and key security improvement projects across on-premises, cloud, Microsoft 365, Oracle, and enterprise applications. Must have hands-on cybersecurity experience with governance and risk management. Key Responsibilities • Manage and enhance cybersecurity operations, SOC, SIEM and incident response. • Support ISO/IEC 27001 ISMS, security policies, risk assessments, audits, and compliance activities. • Manage vulnerability management, security assessments, penetration testing, and remediation tracking. • Implement and improve DLP, PAM/PIM, identity security, Zero Trust, and privileged-access controls. • Assess and strengthen security across Microsoft 365, Azure, Oracle Cloud (OCI), SaaS, applications, databases, and on-premises infrastructure. • Conduct third-party/vendor security assessments and track identified risks. • Support AI security and governance, including ISO/IEC 42001 and controls around enterprise AI platforms. • Review security requirements for new IT projects, applications, and technology implementations. • Support cybersecurity requirements for BCP, Disaster Recovery, and cyber resilience. • Maintain security dashboards and report key risks, incidents, vulnerabilities, compliance gaps, and project progress to management. Key Projects SOC/SIEM | ISO 27001 | DLP | PAM/PIM | Cloud Security | AI Security & Governance | Vulnerability Management | Incident Response | Vendor Risk | Application & Database Security | Cyber Resilience Qualifications & Experience • Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or related field. • 5+ years of relevant cybersecurity experience, preferably within a large enterprise environment. • Hands-on knowledge of SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management, and incident response. • Good knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure, Microsoft 365, and cloud security. • Strong analytical, communication, documentation, and stakeholder-management skills. Preferred Certifications CISSP, CISM, CCSP, ISO/IEC 27001 Lead Implementer/Lead Auditor, Microsoft Cybersecurity certifications, or equivalent. Key Competencies • Cybersecurity and risk management • Security governance and compliance • Incident and vulnerability management • Cloud and enterprise security • Vendor/security assessment • Project ownership • Strong communication and collaboration

Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or related field. 5+ years of relevant cybersecurity experience, preferably within a large enterprise environment. Hands-on knowledge of SOC/SIEM, DLP, PAM/PIM, EDR/XDR, cloud security, vulnerability management, and incident response. Good knowledge of ISO/IEC 27001, security risk management, Microsoft security technologies, Azure, Microsoft 365, and cloud security.

Manage and enhance cybersecurity operations, SOC, SIEM and incident response. Support ISO/IEC 27001 ISMS, security policies, risk assessments, audits, and compliance activities. Manage vulnerability management, security assessments, penetration testing, and remediation tracking. Implement and improve DLP, PAM/PIM, identity security, Zero Trust, and privileged-access controls. Assess and strengthen security across Microsoft 365, Azure, Oracle Cloud (OCI), SaaS, applications, databases, and on-premises infrastructure. Conduct third-party/vendor security assessments and track identified risks. Support AI security and governance, including ISO/IEC 42001 and controls around enterprise AI platforms. Review security requirements for new IT projects, applications, and technology implementations. Support cybersecurity requirements for BCP, Disaster Recovery, and cyber resilience. Maintain security dashboards and report key risks, incidents, vulnerabilities, compliance gaps, and project progress to management.