Information Security Officer (UAE National)

Dicetek LLC

United Arab Emirates, Dubai

5-8 Years

This job is no longer accepting applications

Posted 2 months ago

Job Description

5-8 years of Information Security Governance, Risk, and Compliance experience
Security Policy Development and Implementation
Develop, implement, and maintain comprehensive information security policies, procedures, and guidelines.
Ensure that security policies are aligned with business objectives and comply with regulatory requirements.
Risk Management
Conduct regular risk assessments and vulnerability analyses.
Identify potential threats and vulnerabilities and develop mitigation strategies.
Implement and monitor security controls to manage and mitigate risks.
Incident Response
Develop and maintain an incident response plan.
Lead the response to security incidents and breaches, including investigation, containment, and recovery efforts.
Conduct post-incident analyses and report findings to senior management.
Compliance and Auditing
Ensure compliance with relevant regulations and standards (e.g., ISR, DESC Standards, ISO 22301, ISO/IEC 27001).
Coordinate and oversee internal and external security audits.
Prepare and submit necessary compliance reports.
Security Awareness and Training
Develop and deliver security awareness training programs for employees.
Promote a culture of security awareness within the organization.
Ensure that staff are aware of security policies and procedures.
Monitoring and Reporting
Implement and manage security monitoring tools to detect and respond to threats.
Regularly review security logs and reports to identify and address security issues.
Regularly review security VAPT Reports and make sure it is closed
Provide regular reports on the status of the information security program to senior management.
Collaboration and Advisory
Work closely with IT and other departments to ensure security measures are integrated into all aspects of the organization's operations.
Serve as a key advisor to senior management on information security matters.
Collaborate with external partners and stakeholders to ensure a comprehensive security posture.
Ability to prioritize a wide range of workloads with critical deadlines.