Director- Security Affairs (Emiratisation)

Role overview

Physical security responsibilities

• Develop and implement policies, protocols, and procedures to protect facilities, personnel, visitors, and organizational assets.
• Oversee access control, visitor management, CCTV, surveillance, intrusion detection, and alarm systems.
• Conduct risk assessments and vulnerability reviews and ensure corrective actions are implemented.
• Manage physical security providers, including vendor selection, contract renewals, performance monitoring, and transitions.
• Coordinate incident response with internal stakeholders, service providers, and relevant authorities.
• Develop security awareness programs and support emergency response, evacuation, and business continuity planning.
• Report incidents, operational risks, and performance indicators to senior management.

Cybersecurity responsibilities

• Develop, maintain, and review cybersecurity policies, standards, and procedures.
• Oversee cybersecurity risk assessments, threat analysis, vulnerability management, and remediation initiatives.
• Coordinate security controls with IT teams and external providers, including firewalls, endpoint protection, encryption, and identity and access management.
• Lead cyber incident detection, response, investigation, containment, recovery, and reporting.
• Ensure cybersecurity is incorporated into IT systems, networks, cloud environments, databases, and applications.
• Manage cybersecurity providers, contracts, performance reviews, and vendor transitions with IT and Procurement.
• Update senior management on cybersecurity risks, incidents, compliance, and mitigation measures.

Qualifications and experience

• Bachelor’s degree in Security Management, Cybersecurity, Information Technology, Risk Management, or a related discipline.
• At least 15 years of relevant experience, including leadership in security operations, governance, or risk management.
• Experience overseeing both physical security and cybersecurity through internal teams and external providers.
• Strong understanding of physical security systems, cybersecurity controls, risk assessments, and incident management.
• Expertise in vendor and contract management, stakeholder coordination, and senior-level reporting.
• Strong leadership, strategic planning, communication, and decision-making skills.

Preferred qualifications

• A master’s degree is preferred.
• Government, defence, or critical infrastructure experience is highly desirable.

Candidate profile