IT Security Officer/Specialist

About This Role

Company Description

INDEX Holding, established in 1928 and based in Dubai, United Arab Emirates, is a prominent Emirati company with a legacy of excellence. It comprises seven key subsidiaries, including INDEX Conferences and Exhibitions Organisation, INDEX Trading & Investment among others. The company is dedicated to delivering innovative solutions across diverse industries such as healthcare, media, trading, and event management. With a long-standing reputation, INDEX Holding operates as a cornerstone of sustainable growth and development within the UAE.

Job Summary

The IT Security Officer/Specialist is responsible to establish, implement, and maintain an organization-wide cybersecurity management program that ensures the confidentiality, integrity, and availability of corporate information assets, while protecting the business against evolving cyber threats and security risks.

Key Roles and Responsibilities

• Develop, implement, and manage enterprise-wide cybersecurity and IT risk management programs.
• Work closely with the CTO and IT teams to conduct security risk assessments and improve controls.
• Monitor and manage IT security infrastructure including firewalls, web filtering, spam filtering, and related security tools.
• Lead vulnerability assessments, penetration testing, and periodic security reviews across production systems.
• Ensure patch management, backup restoration integrity, and business continuity readiness.
• Support audits, compliance reviews, and remediation of identified security gaps.
• Prepare cybersecurity reports, policies, procedures, and security guidelines.
• Raise cybersecurity awareness through training sessions and workshops across the business.
• Evaluate security risks in new IT projects and recommend mitigation strategies.
• Assist management in crisis response and disaster recovery planning

Key Skills and Qualifications

• Bachelor’s or Masters Degree in IT, Computer Science, Cyber Security, or related field.
• Minimum 7 years of experience in IT Cyber Security, IT Systems, and Networking environments.
• Preferred IT certifications: CISSP/CEH/CISM/CCNA/CISA
• Strong hands-on experience in Risk Management, Penetration Testing, and Vulnerability Assessment.
• Strong knowledge of cybersecurity frameworks, security standards, and best practices.
• Excellent project management and problem-solving skills.
• Excellent communication skills in English (written and verbal). Arabic is an advantage.
• Excellent interpersonal, organizational, and time management skills.