VP - Information Security (UAE National)

We are seeking an experienced Vice President – Information Security to lead the organization’s enterprise-wide information security strategy, governance, risk, compliance, cybersecurity operations, and technology security roadmap.

The role is responsible for establishing and maintaining a corporate-wide Information Security Management Program to protect the confidentiality, availability, and integrity of information assets across people, process, and technology.

Key Responsibilities:

• Develop and lead the organization-wide Information Security strategy, policies, procedures, and governance framework.
• Act as a senior security advisor to executive leadership, audit committees, and key stakeholders.
• Oversee cybersecurity governance, risk, compliance, audits, VAPT activities, and regulatory reporting.
• Lead security operations covering SOC, SIEM, incident response, vulnerability management, endpoint security, network security, and application security.
• Govern cloud and hybrid security environments across Azure, AWS, or GCP.
• Oversee OT/ICS and SCADA security controls for operational and critical systems.
• Establish and mature Third-Party Risk Management and vendor security programs.
• Embed security-by-design and DevSecOps practices across application and ERP implementation lifecycles.
• Support Business Continuity Planning and IT Disaster Recovery from an information security perspective.
• Manage cybersecurity budget, security awareness programs, and security technology investments.

Requirements:

• Bachelor’s or Master’s degree in Information Technology, Cybersecurity, or a related field.
• Minimum 15 years of relevant experience in IT and Information Security.
• At least 5 years in a senior managerial / leadership role overseeing security across IT infrastructure, operations, and business applications.
• Experience in a regulated or critical infrastructure environment such as aviation, defense, energy, government, or similar sectors.
• Aviation industry experience is strongly preferred.
• Strong experience in IT Governance, Risk, Compliance, cybersecurity strategy, SOC operations, cloud security, and regulatory frameworks.
• Proven ability to present cybersecurity risk posture and strategy to executive leadership, audit committees, or board-level audiences.
• Minimum 3 professional certifications from the following are required: CISSP, CISM, CISA, CRISC, CGEIT, CCSP.
• SABSA or TOGAF certification is an advantage.
• Fluent English is required; Arabic is preferred.

Preferred Background:

Candidates with experience in aviation, aerospace, defense, government, energy, critical infrastructure, or large semi-government organizations will be highly considered.

Key Skills:

Information Security Strategy | Cybersecurity Governance | GRC | Risk Management | SOC | SIEM | Incident Response | Cloud Security | OT/ICS Security | SCADA Security | Zero Trust Architecture | Third-Party Risk Management | DevSecOps | Regulatory Compliance | NESA | PDPL | GCAA | ICAO | EASA | Board-Level Reporting