Security Delivery Manager

Role overview

Workstream delivery

• Manage day-to-day delivery across remediation, hypercare, and the next release.
• Maintain a current, accurate integrated plan covering risks, actions, owners, milestones, dependencies, and evidence status.
• Track agreed priorities and treatment dates; surface constraints early and escalate appropriately.
• Coordinate Group Information Security, programme teams, the global system integrator, ERP vendor, and business stakeholders.
• Manage workstream planning, RAID, dependencies, and reporting for the Director of Information Security and governance forums.
• Take material changes to scope, dates, or treatment plans through governance and change control.

Evidence, release, and team leadership

• Route remediation evidence into Group Information Security assurance and return assurance findings to the responsible delivery owners.
• Maintain traceability from risks through controls and remediation actions to evidence with the Business Analyst and Assurance Specialist.
• Plan security for the next major release so requirements are in place before design and build and dependencies hold through deployment.
• Transition completed security capabilities and open actions to accountable business-as-usual owners.
• Line-manage the Security Business Analyst and support executive governance reporting.

Required experience and capabilities

• Substantial experience delivering security, technology-risk, or compliance workstreams in large, multi-party programmes.
• Strong action-level planning, RAID and dependency management, evidence tracking, and accurate status reporting.
• Working knowledge of information security controls, technology risk, and remediation practice sufficient to challenge owners and review evidence.
• Track record coordinating global system integrators and software vendors to committed dates.
• Able to provide concise, accurate director- and governance-level reporting, identifying risks and decisions needed.
• Experience leading or line-managing analysts.
• Clear written and spoken English for technical and non-technical stakeholders.
• Must already be based in the UAE.

Nice to have

• Security workstream experience in SAP or another large ERP transformation programme.
• Familiarity with ISO/IEC 27001 and NIST CSF.
• PMP, PRINCE2, or MSP.
• Previous work in the Middle East.

Contract details

• 12-month full-time contract through Dreamcast Interactive, with extension based on performance.
• Competitive monthly rate benchmarked to the candidate’s profile.
• Starting as soon as possible.

Workplace

• Based at the client’s Dubai head office with hybrid flexibility.