Data Protection & Information Security Manager

DATA PROTECTION & INFORMATION SECURITY MANAGER

LOCATION:

DUBAI (ONSITE)

ARABIC SPEAKERS ONLY

The Data Protection & Information Security Manager owns and governs enterprise-wide information security and data protection across all regions. This role ensures consistent enforcement of group security standards, eliminates shadow IT, and protects data, systems, and digital assets. Reporting to the Group Digital & Technology Director, the role serves as the central authority for security governance, architecture, and control design.

• Own and enforce data classification, DLP, data residency, backup, and archival standards.
• Govern enterprise security policies and controls aligned with ISO 27001 and best practices.
• Oversee security tooling (EDR, SIEM, MFA, PAM, identity and access controls).
• Lead security incident response, forensics, and post-incident remediation.
• Ensure branch and local IT environments operate under centralized security governance.
• Maintain the security risk register and support audits, regulators, and customer assessments.
• Provide executive-level reporting on security posture, risks, and remediation progress.
• Drive security awareness and embed security-by-design across all IT initiatives.

• Bachelor’s or Master’s degree in a relevant technology discipline.
• 10+ years’ experience in Information Security and/or Data Protection.
• Strong hands‑on expertise in DLP, EDR, SIEM, PAM, identity security, and ransomware defense.
• Proven experience handling enterprise security incidents in multi‑country environments.
• Ability to engage confidently with executives, auditors, and regulators.

• ISO 27001 Lead Implementer/Auditor, CISSP, CISM, or equivalent.
• Experience in GCC or regulated enterprise environments.
• Background in centralized IT governance models.

• Eliminate shadow IT and decentralized security practices.
• Strengthen detection, response, and forensic readiness.
• Enforce group-wide data protection and security governance.
• Support the FY25–28 Security & Digital Transformation roadmap.