Information Security Manager (ОАЭ)

We are looking for an experienced Cyber Security Manager ( IT / OT and Physical Security Systems) to join a progressive, fast-growing manufacturing company in the UAE.

Role Objective: develop and maintain the Information Security Management System (ISMS) aligned with ISO 27001, NIST CSF and applicable regulations.

Responsibilities:

Governance, Risk and Compliance

• Develop, implement and maintain the Information Security Management System (ISMS), including security policies, standards, procedures and technical baselines aligned with ISO/IEC 27001, NIST CSF and applicable regulatory requirements.
• Own the cyber risk register: perform risk assessments of IT, OT and physical-security systems, define treatment plans, track mitigation to closure and report residual risk to management.

Security Architecture and Operations

• Define and enforce the security architecture of the corporate and security networks, including network segmentation, VLAN and firewall rule design, secure remote access, and separation of the SOC / security network from the corporate network.
• Ensure cyber security requirements are embedded in the design, procurement, installation, testing and acceptance of integrated security systems (PSIM / Command and Control, VMS, CCTV, access control, intrusion detection, IP intercom and IP public address).
• Harden and maintain servers, workstations, network switches, storage and IP field devices: baseline configurations, secure credentials, removal of default accounts and unused services, certificate and firmware management.
• Manage identity and access control, including Active Directory, role-based access, privileged accounts, multi-factor authentication, the joiner / mover / leaver process and periodic access reviews.
• Run vulnerability and patch management: scanning, prioritisation, remediation deadlines, exception handling and verification of closure.
• Monitor security events and network health through SIEM / log management, endpoint protection and the cyber and network health monitoring functions of the security platform; triage alerts and escalate confirmed incidents.

Incident Response and Resilience

• Lead incident response: containment, eradication, recovery, evidence handling, root-cause analysis, incident reporting and lessons learned; maintain and periodically test the incident response plan.
• Manage endpoint, e-mail and data protection controls, including anti-malware / EDR, encryption, mail filtering, mobile devices and removable media.
• Ensure backup, restoration and disaster-recovery capability for critical systems and participate in business continuity planning and testing.

People, Vendors and Reporting

• Plan and coordinate security audits, technical reviews and penetration tests; track all findings to closure.
• Manage vendor and contractor security: security clauses in contracts and SLAs, control of contractor and remote vendor access, supervision of works on site and acceptance of delivered systems.
• Deliver security awareness training and phishing simulations and advise employees on secure working practices.
• Coordinate with physical security, facilities, HR and operations to ensure converged protection of people, assets and information.
• Support internal investigations requiring digital evidence (CCTV exports, access-control and system logs) in line with legal, contractual and data-protection requirements.
• Prepare the cyber security part of the IT budget: cost estimates, justification, licence renewals, replacement cycles and the multi-year security roadmap.
• Define, measure and report security KPIs (patch compliance, incident volume and mean time to respond, audit findings, training completion) to the Head of IT and senior management.
• Maintain complete and current technical documentation: network and system diagrams, IP addressing plan, configuration records, procedures and change records.
• Supervise, mentor and evaluate assigned security staff and external service providers; plan workload and set objectives.

Requirements:

• Bachelor or Master degree in Information Technology, Cyber Security, Computer Science or a related engineering discipline.
• Minimum 5 years of experience in information / cyber security, including at least 2 to 3 years in a lead or managerial position, preferably in a multi-site or industrial environment.
• Professional certification such as CISSP, CISM, CISA, CompTIA Security+, IBM Cybersecurity Analyst or equivalent, or willingness to obtain one within an agreed period.
• Working knowledge of ISO/IEC 27001, NIST Cybersecurity Framework and PCI DSS; knowledge of IEC 62443 for industrial / OT environments is an advantage.
• Hands-on experience with firewalls, network segmentation and VPN, Windows Server and Active Directory, endpoint protection / EDR, SIEM or log management, backup and patch-management tools.
• Practical understanding of IP-based physical security systems: CCTV and VMS, access control, intrusion detection, PSIM platforms, PoE switching, fibre backbone and structured cabling.
• Proven experience in incident response, security investigations and evidence handling.
• Experience in vendor management, procurement support, SLA management and system acceptance testing.
• Strong documentation, reporting and presentation skills, with the ability to explain technical risk to non-technical management.
• Professional working proficiency in English; additional languages are an advantage.

:

• Full-time, office-based position in , .
• Employment visa.
• Medical insurance.
• Supportive corporate environment.
• Salary about 24.5k AED/month