Vice President - Information Security

About the Role

The organization seeks a Vice President of Information Security to spearhead the company’s strategy regarding information security, governance, risk, compliance, and cybersecurity operations. This senior leader will be responsible for safeguarding organizational information assets, enhancing cyber resilience, and advising top management on cyber risks, security posture, regulatory mandates, and new security threats.

Key Responsibilities

• Develop, lead, and maintain the enterprise-wide information security strategy, roadmap, policies, and governance structures.
• Supervise cybersecurity risk management, ensure regulatory compliance, coordinate audits, and enforce security controls.
• Oversee security operations including Security Operations Center (SOC), incident response protocols, threat intelligence monitoring, and vulnerability management processes.
• Champion cloud security initiatives, data protection efforts, identity and access management, and the secure implementation of emerging technologies.
• Implement and sustain third-party and vendor security risk assessment frameworks.
• Support organizational business continuity planning, disaster recovery strategies, and overall cyber resilience.
• Ensure security considerations are integrated into IT infrastructure, application development, digital transformation projects, and AI initiatives.
• Deliver executive-level reports covering cybersecurity risks, incident statuses, security posture, and remediation plans.
• Lead, mentor, and develop internal information security teams and manage collaborations with external security vendors and partners.
• Promote an organizational culture focused on cybersecurity awareness and proactive security practices.

Qualifications and Experience

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline; Master’s degree preferred.
• A minimum of 10–15 years of professional experience in IT, Information Security, or Cybersecurity with at least 5 years in a senior leadership capacity.
• Demonstrated expertise in cybersecurity governance, risk and compliance frameworks, SOC management, and incident response.
• Experience in regulated or high-security industries such as aviation, defense, government, energy, healthcare, finance, or telecommunications is advantageous.
• Familiarity with relevant standards and frameworks such as ISO 27001, NIST, UAE IA/NESA, PDPL, PCI DSS, or equivalents.
• Preferred professional certifications include CISSP, CISM, CISA, CRISC, CGEIT, CCSP, and ISO 27001 lead implementer or auditor certifications.
• Exceptional leadership capabilities combined with strong stakeholder management, analytical thinking, and decisive problem-solving skills.
• Fluent in English; Arabic language skills considered a benefit.

Additional Information

Recruitment Fraud Notice: Candidates should beware of fraudulent job offers claiming to represent the organization. The company does not request personal financial details or payments during recruitment. Interviews are conducted in person or via video or telephone calls only. Any request for money or sensitive financial information should be treated as a scam.