Cyber Security Lead

: Role & Responsioilties : Cybersecurity Strategy & Leadership : - Develop and execute enterprise cybersecurity strategies aligned with business objectives. - Lead cybersecurity programs covering prevention, detection, response, and recovery. - Define security roadmaps, policies, standards, and operating procedures. - Provide cybersecurity guidance to senior leadership and business stakeholders. - Drive continuous improvement of the organization's security maturity. Security Operations & Threat Management : - Lead Security Operations Center (SOC) activities, including monitoring, detection, investigation, and response. - Manage incident response processes and coordinate resolution of security incidents. - Oversee threat intelligence, vulnerability management, and security monitoring activities. - Analyze cyber threats and recommend proactive mitigation measures. - Coordinate with internal teams and external security vendors during incidents. Risk Management & Compliance : - Conduct cybersecurity risk assessments and support risk mitigation initiatives. - Ensure compliance with UAE cybersecurity regulations and industry standards. - Implement and maintain security frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and UAE IA requirements. - Support internal and external security audits. - Maintain cybersecurity policies, controls, and governance documentation. Security Architecture & Technology Management : - Review and improve security architecture across infrastructure, applications, cloud, and networks. - Work with IT teams to implement secure design principles. - Provide security recommendations for cloud environments (AWS/Azure/GCP), network security, Identity and Access Management (IAM), endpoint security, application security, and data protection. - Evaluate and manage cybersecurity tools and technologies. Vulnerability & Security Assessment : - Lead vulnerability assessment and penetration testing activities. - Track remediation of security weaknesses. - Manage security findings and risk acceptance processes. - Ensure timely closure of critical and high-risk vulnerabilities. Preferred Candidate Profile : Experience : - 8 - 15 years of experience in cybersecurity, information security, or risk management. - Proven experience leading cybersecurity programs or security operations teams. - Experience working in large enterprises, banking, government, telecom, healthcare, energy, or critical infrastructure environments preferred. - UAE/GCC experience is an advantage. Strong knowledge of : - Security Operations Center (SOC) operations, SIEM platforms (Splunk, Microsoft Sentinel, QRadar, ArcSight), vulnerability management tools, EDR/XDR, network security technologies, cloud security, IAM/PAM, incident response, and security architecture. Education : - Bachelor's degree in Computer Science, Information Security, Cybersecurity, IT, or related discipline. - Master's degree or specialized cybersecurity education is an advantage.