We are seeking an experienced Vice President – Information Security to lead the organization's enterprise-wide information security strategy, governance, risk, compliance, cybersecurity operations, and technology security roadmap.
The role is responsible for establishing and maintaining a corporate-wide Information Security Management Program to protect the confidentiality, availability, and integrity of information assets across people, process, and technology.
Key Responsibilities:
- Develop and lead the organization-wide Information Security strategy, policies, procedures, and governance framework.
- Act as a senior security advisor to executive leadership, audit committees, and key stakeholders.
- Oversee cybersecurity governance, risk, compliance, audits, VAPT activities, and regulatory reporting.
- Lead security operations covering SOC, SIEM, incident response, vulnerability management, endpoint security, network security, and application security.
- Govern cloud and hybrid security environments across Azure, AWS, or GCP.
- Oversee OT/ICS and SCADA security controls for operational and critical systems.
- Establish and mature Third-Party Risk Management and vendor security programs.
- Embed security-by-design and DevSecOps practices across application and ERP implementation lifecycles.
- Support Business Continuity Planning and IT Disaster Recovery from an information security perspective.
- Manage cybersecurity budget, security awareness programs, and security technology investments.
Requirements:
- Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
- Minimum 15 years of relevant experience in IT and Information Security.
- At least 5 years in a senior managerial / leadership role overseeing security across IT infrastructure, operations, and business applications.
- Experience in a regulated or critical infrastructure environment such as aviation, defense, energy, government, or similar sectors.
- Aviation industry experience is strongly preferred.
- Strong experience in IT Governance, Risk, Compliance, cybersecurity strategy, SOC operations, cloud security, and regulatory frameworks.
- Proven ability to present cybersecurity risk posture and strategy to executive leadership, audit committees, or board-level audiences.
- Minimum 3 professional certifications from the following are required: CISSP, CISM, CISA, CRISC, CGEIT, CCSP.
- SABSA or TOGAF certification is an advantage.
- Fluent English is required; Arabic is preferred.
Preferred Background:
Candidates with experience in aviation, aerospace, defense, government, energy, critical infrastructure, or large semi-government organizations will be highly considered.
Key Skills:
Information Security Strategy | Cybersecurity Governance | GRC | Risk Management | SOC | SIEM | Incident Response | Cloud Security | OT/ICS Security | SCADA Security | Zero Trust Architecture | Third-Party Risk Management | DevSecOps | Regulatory Compliance | NESA | PDPL | GCAA | ICAO | EASA | Board-Level Reporting
