Cybersecurity Incident Response Lead / Information Security Director

Role overview

Key responsibilities

• Lead incident response from detection through containment, eradication, recovery, and post-incident review.
• Develop incident response plans, playbooks, escalation procedures, and communication protocols.
• Coordinate investigations of malware, phishing, unauthorized access, data exposure, and other security events.
• Monitor emerging cyber threats and assess their business impact.
• Establish and improve security policies, standards, procedures, and governance frameworks.
• Identify information security risks and recommend mitigations and controls.
• Coordinate vulnerability management, security assessments, penetration testing, and remediation.
• Collaborate with IT, engineering, compliance, legal, and business teams on incidents and risk initiatives.
• Oversee security monitoring, SIEM, EDR, threat intelligence, and incident-management capabilities.
• Support business continuity, disaster recovery, and cyber-resilience planning.
• Report security metrics, incident trends, remediation progress, and risk indicators to management.
• Conduct post-incident analysis, promote security awareness, and support audits, regulatory requirements, and third-party risk reviews.

Requirements

• 3+ years of relevant professional experience is preferred.
• A bachelor's degree or equivalent in a related field is preferred.
• Strong knowledge of incident response, threat detection, vulnerability management, security operations, and risk management.
• Experience developing security policies, controls, response procedures, and governance processes.
• Familiarity with SIEM, EDR/XDR, IAM, cloud and network security, and security monitoring technologies.
• Strong understanding of NIST, ISO 27001, CIS Controls, or similar frameworks.
• Analytical, communication, leadership, and crisis-management skills; ability to coordinate technical and non-technical stakeholders remotely.
• Professional cybersecurity certifications are not required unless specifically requested.

Work arrangement

• The role is fully remote in the United Arab Emirates.
• The position is part-time.

What is offered

• Competitive compensation aligned with experience and responsibilities.
• Opportunity to influence cybersecurity strategy and organizational resilience.
• Exposure to international security operations, technologies, and business environments.
• Access to modern cybersecurity and collaboration tools, with professional growth opportunities.