Manager - Information Security; UAE National

Manager - Information Security (UAE National) Job Purpose

To lead Dubai Chambers’ Information Security function by establishing and overseeing robust cybersecurity strategies, governance frameworks, and risk management programs that safeguard information assets and support business continuity. The role ensures compliance and regulatory requirements, drives continuous monitoring and audit readiness, and enhances cyber resilience through proactive threat management and security awareness. The Manager collaborates with cross‑functional stakeholders, adopts emerging technologies and best practices, and cultivates a strong security culture to protect IT systems and data in alignment with the organization’s strategic objectives.

• Manage the timely planning and execution of information security audits to formally assess information security performance against defined security parameters, standards, regulations, and internal policies.
• Identify gaps, recommend corrective actions, and monitor remediation to ensure compliance and continuous improvement.
• Lead investigations related to information security breaches, ensuring root cause analysis is conducted and appropriate corrective and preventive actions are implemented.

• Manage the organization’s information security systems and controls, identifying and advising on risk mitigation activities related to systems, processes, and technologies.
• Ensure security risks are identified, assessed, and effectively controlled within acceptable risk levels.
• Oversee continuous security monitoring activities and ensure timely implementation of remedial actions to maintain compliance with regulatory and organizational security requirements.

• Ensure the implementation and continuous improvement of an information security strategy aligned with Dubai Chambers’ strategic goals and objectives.
• Perform security risk assessments and oversee the timely execution of cybersecurity initiatives while mitigating identified risks.
• Support the Director – Information Security & Risk Management Office in evaluating cybersecurity controls to ensure effectiveness, compliance, and adherence to key policies and standards, and drive remediation efforts.
• Ensure the implementation and maintenance of the Information Security Management System (ISMS) and its controls across DC.
• Manage periodic reviews of compliance with cybersecurity regulations, frameworks, and control requirements.
• Promote and embed a strong cybersecurity culture across Dubai Chambers.
• Manage cybersecurity incidents, including response coordination, investigation, containment, and lessons learned.
• Develop, maintain, and enforce information security policies, procedures, standards, and controls to protect DC’s information systems and networks from cyber threats.
• Manage internal and external information security and cybersecurity audits and submit findings and reports to the Director – Information Security & Risk Management Office.
• Stay current with emerging cybersecurity threats, technologies, and best practices, and recommend enhancements to security controls and capabilities.
• Prepare and present periodic cybersecurity posture and risk reports, including recommendations for improvement, to senior management.
• Manage relationships with external security service providers, vendors, and strategic partners.

• Review and approve all information security documentation prior to release, ensuring alignment with regulatory requirements, internal policies, standards, and best practices.
• Provide guidance and feedback on documentation improvements to ensure accuracy, completeness, and compliance.

• Lead the planning, management and control of the various stages of Information Security related projects to ensure that the project cycle is completed, meeting agreed project parameters (cost, budget, timelines, scope and security), standards and objectives.

• Stay informed of regulatory changes, industry standards, emerging technologies, and international best practices within the information security domain.
• Assess the impact of…