More jobs:
Job Description & How to Apply Below
- Own end-to-end execution of entity-controlled cyber and SAFW requirements for Aldar Estates, reducing operational cyber risk while enabling safe delivery across estates operations, IoT/OT environments, and third-party ecosystems.
- Align and integrate with central SOC, security governance, and architecture functions for enterprise consistency
- R3 – high, end-to-end local execution: own risk-to-remediation closure for entity-controlled requirements, with named owner, target date, and closure evidence.
- A2 – bounded authority: approve local control actions within delegated thresholds; recommend higher-threshold risk acceptance with evidence-based decision packs; elevate material risk, regulatory-impact incidents, and repeated critical SLA breaches to central authority.
- Endpoint hardening and health: baseline compliance, backlog closure, exception reduction, and evidence reporting.
- IoT/OT/robotics security: asset inventory, segmentation, onboarding checks, firmware and vulnerability remediation, and secure remote/vendor access.
- Local network exposure: enforce zoning and segmentation hygiene and close internet-facing high-risk exposures.
- Maintain a risk-prioritized entity cyber roadmap and produce evidence-based recommendations, ensuring approved actions are closed.
- Govern exception aging, compensating controls, and due-date integrity
- Partner with central SOC on detection and response; own local containment coordination and corrective-action closure.
- Convert post-incident lessons into local control changes and improve MTTD/MTTR and repeat-incident rates.
- Apply group security requirements to vendor onboarding and operations; drive closure of third-party findings with procurement, legal, and operational owners.
- Re-certify privileged and remote vendor access at defined cadence.
- Align delivery with central policy, architecture standards, and assurance requirements; feed back local constraints; support audits with source-traceable evidence.
- Entity-owned (end-to-end): endpoint hardening, IoT/OT/robotics controls, local third-party enforcement, exception workflow, and incident corrective actions.
- Central-owned: SOC platform, group policy and standards, architecture baselines, and high-threshold risk acceptance.
- P1 AI-drafted documentation; P2 AI-assisted triage with human validation gates; P3 AI-orchestrated vulnerability, exception, and third-party risk workflows; P4 (stretch) KPI-driven workflow tuning.
- Guardrails: AI drafts and proposes; humans approve risk decisions, exceptions, and executive statements. Material recommendations need source-traceable evidence and confidence indication; no AI-only approvals.
- Critical vulnerability remediation within SLA (%), by risk tier; exception aging and closure rate by severity.
- End-to-end cycle time from risk detection to verified closure; repeat incident/control-failure rate.
- Automation coverage of priority workflows (%); AI recommendation override rate with root-cause classification.
- Alignment with Group Infosec Security Architecture and Governance Frameworks (%).
Qualification:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
- Preferred certifications: CISSP, CISM, CRISC, GIAC (or equivalent).
- Demonstrated delivery across governance, operational risk reduction, and cross-functional execution.
- Hands-on fluency in endpoint, network exposure, IoT/OT operational security constraints, and third-party security execution
Industry Experience (No. of years):
- 10+ years in cyber security with leadership accountability in enterprise environments.
Skills:
- Cyber security governance, operational risk reduction, and control assurance
- Endpoint, network exposure, and IoT/OT/robotics security
- Vulnerability, exception, third-party, and incident action closure
- Human plus AI workflow orchestration with verification and escalation discipline
- Executive communication, stakeholder alignment, and action-closure discipline
- Analytical thinking, risk judgment, problem-solving, and continuous improvement
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×