Manager - Information Security (UAE Nationals Only)

Overview

This role leads the organization's enterprise information security initiatives, ensuring systems, policies, and risk management frameworks align with Dubai's regulatory standards. The position entails overseeing cybersecurity operations, enforcing access and infrastructure controls, and driving continuous improvements informed by threat intelligence. It also requires coordinating audits and readiness for incidents to maintain secure and resilient operations at the Roads and Transport Authority (RTA).

Key Responsibilities

• Establish, approve, and enforce comprehensive information security policies and standards; define strategic and operational objectives along with KPIs and audit schedules; oversee remediation efforts across relevant divisions.
• Develop and manage the risk management framework, designate accountable owners for risk documentation and response plans; ensure periodic reviews with associated agencies and sectors.
• Mandate RTA-wide security awareness programs for personnel, suppliers, and contractors with measurable goals; ratify annual awareness strategies and scheduling.
• Supervise financial governance related to information security; approve budgets and forecasts; prioritize strategic projects and monitor their execution, authorizing adjustments.
• Oversee Vulnerability Assessments and Penetration Testing initiatives; authorize preventive and corrective actions; conduct risk-based audits and enforce timely completion.
• Manage reporting, investigations, and incident handling with internal and external stakeholders; direct Security Operations Center activities; approve incident reviews and ensure implementation of recommendations.
• Administer access control policies including eligibility approvals, privilege audits, network and system monitoring, and compliance reporting.
• Coordinate the collection and analysis of threat intelligence on internal and external risks; lead investigations with relevant authorities; approve threat scenarios and conduct simulation exercises.
• Supervise Information Security Management System (ISMS) deployment and resourcing, ensuring adherence to policies and audit outcomes while maintaining follow-up records.
• Authorize and monitor business continuity and disaster recovery plans for technical systems; enforce periodic testing and updates for effectiveness.
• Provide periodic briefings and reports on strategy implementation, audit results, incident exercises, threat landscape, and performance metrics to senior leadership.
• Drive improvements based on audit findings, simulations, incident reviews, and threat intelligence; approve policy and control updates; enforce closure of audit observations.
• Manage supplier performance via KPIs, address discrepancies with corrective measures, and verify compliance with security contractual provisions.
• Oversee benchmarking and industry trend monitoring to enhance programs and infrastructure; endorse process improvements and best practices to reinforce preventive controls.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Information Security, or Cyber Security.
• Experience of at least 12 years for Master’s holders or 14 years for Bachelor’s degree holders in relevant fields.
• Preferred Certifications: CISSP, CISM, ISO/IEC 27001 Lead Implementer or Auditor, ITIL, COBIT.

Core Technical Competencies

• Crisis and Emergency Management
• Cybersecurity and Information Risk Management
• Disaster Recovery and Business Continuity Planning
• Governance, Risk, and Excellence Programs
• Policy Analysis and Development
• Quality Management and Enhancement
• Strategic Planning and Execution
• Threat Intelligence and Analysis