Information Security GRC Manager Majid Al Futtaim Dubai

Majid Al Futtaim is currently looking for an Information Security GRC Manager who will be responsible for supporting the critical business processes, digital technologies have come to play a major role and that includes maintaining their information security and resiliency. Information security is a strategic pillar of the organization’s digital transformation strategy. Based in Dubai and reporting to Director of Information Security, the role holder will be an enabler for ensuring the operationalization of the group information security governance strategy including ensuring that the related technology investments follow security best practices and remain measurable, for efficacy. This is a senior level full time role. The salary for this role ranges from 17000 AED to 35000 AED, which may be slightly negotiatable during the interview.

Responsibilities of Information Security GRC Manager

• Development and update of the GRC dashboard and recommend improvements in metrics captured therein.
• Continuously define and/or refine security measurement metrics across deployed security technologies and capture them to incorporate within GRC dashboard.
• Plan, conduct and incorporate learnings from regular VAPT and other risk assessment exercises to test the adequacy of existing controls.
• Ensure that established information security management (ISMS) framework complies with best practice standards (OWASP / ISO 27001 etc.) and is appropriately replicated across other operating regions.
• Contribute to the development and maintenance of technology / IT risk assessments of the technology infrastructure supporting identified critical processes.
• Aid fulfillment of regulatory and industry best practices for information security and compliance domains.
• Perform IT risk assessments and take it to its levels of maturity in accordance to business needs.
• Rewrite plans and recommendations where required for improved security posture.
• Contribute to policies and standards including deliverables, outputs, activities, services and functions to maintain its objectives.

Eligibility Requirements for Role of An Information Security GRC Manager

• Certified in information security (CISSP) or similar.
• 8-10 years of exposure to multinational or multi-disciplinary operations and technology environment within the information security operations and/or information security compliance.

Skills Desired

• Knowledge of Secure software development lifecycle / DevSecOps across IaC and Microservices.
• Expert knowledge of one or more IT risk assessment methodologies, preferably in a consulting environment.
• Knowledge of co-relation use cases in SIEM for cloud first environments.

Information Security & Assurance Head ADIB

Risk & Operations Support Executive Majid Al Futtaim