IT Security- Risk Management

Role and engagement

Experience and qualifications

• Minimum 10 years of information security or cybersecurity experience, including substantial GRC, technical security assessment, risk management, and regulatory compliance experience.
• Hands-on technical security reviews and risk assessments across applications, infrastructure, networks, cloud environments, and enterprise technology solutions.
• Strong understanding of security architecture; network, operating system, database, and application security; APIs; identity and access management; encryption; vulnerability management; and security monitoring.
• Experience identifying vulnerabilities, evaluating controls, assessing remediation plans, and determining residual risk.
• Strong knowledge of ISO 27001, NIST Cybersecurity Framework, risk management methodologies, and applicable UAE requirements, including DESC ISR.
• Experience with risk registers, audit management, policy governance, third-party risk assessments, and enterprise GRC platforms such as RSA Archer or equivalent.
• Experience working with IT operations, infrastructure, cloud, network, application, cybersecurity, and managed service teams in large or regulated environments.
• Strong analytical, report-writing, stakeholder management, and presentation skills; able to explain technical risks and business implications to senior management.

Responsibilities

• Conduct technical security reviews and risk assessments across applications, infrastructure, networks, cloud environments, and enterprise technology solutions.
• Identify technical vulnerabilities and evaluate security controls.
• Assess remediation plans and determine residual risk.
• Manage or contribute to risk registers, audit management, policy governance, and third-party risk assessments.
• Work with IT operations, infrastructure, cloud, network, application, cybersecurity, and managed service teams.
• Communicate technical risks and business implications to senior management through reports and presentations.