Company Description
INDEX Holding, established in 1928 and based in Dubai, United Arab Emirates, is a prominent Emirati company with a legacy of excellence. It comprises seven key subsidiaries, including INDEX Conferences and Exhibitions Organisation, INDEX Trading & Investment among others. The company is dedicated to delivering innovative solutions across diverse industries such as healthcare, media, trading, and event management. With a long-standing reputation, INDEX Holding operates as a cornerstone of sustainable growth and development within the UAE.
Job Summary
The IT Security Officer/Specialist is responsible to establish, implement, and maintain an organization-wide cybersecurity management program that ensures the confidentiality, integrity, and availability of corporate information assets, while protecting the business against evolving cyber threats and security risks.
Key Roles and Responsibilities
- Develop, implement, and manage enterprise-wide cybersecurity and IT risk management programs.
- Work closely with the CTO and IT teams to conduct security risk assessments and improve controls.
- Monitor and manage IT security infrastructure including firewalls, web filtering, spam filtering, and related security tools.
- Lead vulnerability assessments, penetration testing, and periodic security reviews across production systems.
- Ensure patch management, backup restoration integrity, and business continuity readiness.
- Support audits, compliance reviews, and remediation of identified security gaps.
- Prepare cybersecurity reports, policies, procedures, and security guidelines.
- Raise cybersecurity awareness through training sessions and workshops across the business.
- Evaluate security risks in new IT projects and recommend mitigation strategies.
- Assist management in crisis response and disaster recovery planning
Key Skills and Qualifications
- Bachelor's or Masters Degree in IT, Computer Science, Cyber Security, or related field.
- Minimum 7 years of experience in IT Cyber Security, IT Systems, and Networking environments.
- Hands on experience using Microsoft security tools and AWS.
- Preferred IT certifications: CISSP/CEH/CISM/CCNA/CISA
- Strong hands-on experience in Risk Management, Penetration Testing, and Vulnerability Assessment.
- Strong knowledge of cybersecurity frameworks, security standards, and best practices.
- Excellent project management and problem-solving skills.
- Excellent communication skills in English (written and verbal). Arabic is an advantage.
- Excellent interpersonal, organizational, and time management skills.