Information Security Program Manager (ISO/IEC 27001)

Role details

Qualifications and experience

• Requires a bachelor’s degree in Information Security, Information Technology, Computer Science, or a related field.
• Requires 7–10+ years in information security, including at least 3 years leading ISMS, security risk, or compliance programs.
• Requires a record of leading at least one ISO/IEC 27001 implementation or certification.
• Requires in-depth knowledge of ISO/IEC 27001:2022, ISO/IEC 27002, ISO/IEC 27005, and risk assessment methodologies.
• Requires hands-on implementation and assessment of CIS Critical Security Controls and CIS Benchmarks, including configuration compliance scanning.
• Requires understanding of networks, operating systems, cloud platforms, identity and access management, and security tools including firewalls, SIEM, EDR, and vulnerability scanners.
• Requires familiarity with Dubai information security regulations and healthcare data protection requirements; healthcare or government experience is preferred.

Program responsibilities

• Lead ISMS, security risk, or compliance programs and ISO/IEC 27001 implementation or certification.
• Implement and assess CIS Critical Security Controls and CIS Benchmarks using configuration compliance scanning tools.
• Conduct or oversee security risk assessment and compliance activities.

Preferred certifications and standards

• Working knowledge of ISO/IEC 20000-1 and ISO 22301 is required; hands-on implementation or audit experience is a strong advantage.
• Preferred certifications include ISO/IEC 27001 Lead Implementer or Lead Auditor, CISSP, CISM, or CISA.
• ISO/IEC 20000-1 or ISO 22301 Lead Implementer or Lead Auditor and CRISC or equivalent risk certification are advantageous.
• PMP, PRINCE2, or equivalent project management certification is listed.