التخصص
تكنولوجيا المعلومات
نوع الدوام
دوام كامل
الخبرة
أي مستوى
الموقع
دبي
وصف الوظيفة
JOB OVERVIEWThe Cyber Security Manager is responsible for the day-to-day operation and continuous improvement of information security controls across Daman Securities and Daman Investments. The role manages the relationship with the Group's managed security service provider, runs vulnerability management and incident response, maintains security policies and the risk register, and supports regulatory and audit requests. The Cyber Security Manager reports to the Group CIO and executes the Group's information security program rather than setting Group strategy.KEY DUTIES AND RESPONSIBILITIES Security Operations & Incident ResponseManage the day-to-day relationship with the managed SOC / MSSP, including alert triage, escalation, and tracking performance against SLA.Execute incident response playbooks, coordinate containment and recovery, and support post-incident review and regulatory notification under the Group CIO's direction.Run the vulnerability management programme and coordinate penetration testing, tracking findings through to remediation.Policy, Risk & Compliance SupportMaintain and update information security policies, standards, and procedures within the framework set by the Group CIO.Maintain the information security risk register and produce regular reporting on risk position and remediation status.Prepare evidence and coordinate responses for internal audit, external audit, and CMA regulatory requests on information security matters.Support responses to institutional due diligence reviews and client security questionnaires for Daman Securities and Daman Investments clients.Identity, Access & Data SecurityAdminister identity and access management processes, including joiner-mover-leaver workflows, privileged access, and periodic access recertification.Support data classification, data loss prevention, and encryption standards, and test backup and recovery restorability.Provide security input on change requests — new systems, integrations, and vendor onboarding — ahead of go-live.POSITION REQUIREMENTSEducational QualificationsBachelor's degree in Computer Science, Information Systems, or a related field, or equivalent demonstrable experience.Technical CompetenciesWorking knowledge of security operations, incident response, vulnerability management, identity and access management, and data protection.Familiarity with Microsoft 365 security tooling (Defender, Entra ID, Purview) and cloud security fundamentals.Experience working with a managed SOC or MSSP provider.Working knowledge of UAE information security expectations relevant to financial services (CMA, PDPL) is an advantage.Skills/Personal AttributesStructured and detail-oriented, with the ability to execute consistently against an established control framework.Good communicator, comfortable working across IT, trading, wealth management, and HR/EOS teams.High level of integrity and discretion in handling sensitive and confidential information.Arabic language skills are an advantage.Work Experience5–8 years of experience in information security or IT risk, with hands-on exposure to SOC operations, vulnerability management, or identity and access management.Experience in financial services is preferred but not required.A relevant certification (e.g. CISSP, CISM, CISA, Security+) is preferred, or a willingness to obtain one.
التعليقات
لا توجد تعليقات منشورة حتى الآن.