linkedin
Senior Information Technology Manager
Global Hotel Alliance
Dubai, UAE
Full-time
Mid-Senior
Onsite
Discovered 1 weeks ago
IT operations and service deliveryCloud infrastructureNetworkingIdentity and access managementEndpoint securityISO 27001 ISMS
Role Overview
Hands-on role combining day-to-day IT and security operations, IT support, infrastructure security, and supplier management.
Own IT controls for the ISO 27001 information security management system and support audit preparation.
Key Skills for This Role
IT operations and service deliveryCloud infrastructureNetworkingIdentity and access managementEndpoint securityISO 27001 ISMS
Full Job Posting
Role overview
Hands-on role combining day-to-day IT and security operations, IT support, infrastructure security, and supplier management.
Own IT controls for the ISO 27001 information security management system and support audit preparation.
IT operations and service delivery
- Run IT operations across cloud infrastructure, networks, email, and collaboration platforms; embed security across systems from design through decommissioning.
- Maintain end-user device integrity and network performance; run user support to technical standards and agreed SLAs.
- Deliver security awareness training with GRC; develop IT capacity plans, budgets, and technology roadmaps.
Security operations
- Monitor infrastructure security and manage vulnerability management, email gateways, endpoint protection, patching, and access controls.
- Coordinate enterprise risk thresholds, threat intelligence, and vulnerability priorities with IT GRC and information-security leaders.
- Oversee identity and access management, including joiner/mover/leaver processes; respond to findings from the outsourced SOC.
- Conduct third-party security reviews of vendors and suppliers.
ISO 27001 and incident management
- Implement and maintain ISO 27001 ISMS controls; keep policies, procedures, and audit evidence current and close IT audit findings on schedule.
- Manage the security partner's SOC, vulnerability testing, and technical compliance tasks.
- Lead incident containment, root-cause investigation, and recovery; run disaster recovery tests and business continuity reviews.
AI responsibilities
- Oversee secure adoption and daily operations of authorized AI platforms, such as Gemini Enterprise and GitHub Copilot, under the AI Governance Policy.
- Enforce data-protection and prompt-security practices to prevent sensitive information being entered into unauthorized or public AI tools.
- Implement AIOps for IT service workflows, alert triage, threat detection, and incident containment with the outsourced SOC.
- Monitor AI-enabled infrastructure risks, maintain audit-ready ISO 27001 evidence, and participate in assessments of emerging AI implementations.
Essential qualifications
- Bachelor's degree in IT, computer science, or a related field.
- 8+ years in IT, including at least 3 years leading IT operations and security teams.
- Strong knowledge of cloud infrastructure, networks, identity and access management, and endpoint security.
- Experience managing outsourced providers, including a SOC or managed security service; experience supporting ISO 27001 ISMS implementation and audit preparation.
- Working knowledge of GDPR and the UAE Personal Data Protection Law.
Desirable qualifications
- In-depth knowledge of at least one of Microsoft Azure, AWS, or OCI, including virtual network design and security.
- ITIL, ISO 27001 Lead Implementer or Lead Auditor, or CISM certifications are advantageous; equivalent practical experience is valued equally.
- Experience with disaster recovery planning and business impact analysis.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career