Manager Information Security Chalhoub Group UAE

Chalhoub Group is currently hiring experienced and qualified candidate for the job role of Manager Information Security (Risk and Compliance) in Dubai. Candidate will work in the Information Security function of the group. Candidate will be responsible to safeguard the group’s information assets and infrastructure and ensuring compliance with industry standards, regulations and internal control frameworks. Job holder will be a strategic thinker with a solid technical foundation, capable of managing and mitigating cyber risks through strong collaboration with cross-functional teams and relevant stakeholders. This vacancy was posted by Firdos Shaikh Talent Partner – eCom & Digital

Responsibilities of Manager Information Security

Risk Management:

• Identify, assess and prioritize security risks associated with the group’s Information assets, systems and services.
• Develop and implement security risk mitigation strategies and control measures to protect critical assets and sensitive information.
• Evaluate and manage cybersecurity risks associated with third-party vendors and service providers.
• Collaborate with procurement and legal teams to ensure that vendor contracts include appropriate security requirements.

Policy & Compliance Management:

• Develop, review and update information security policies, standards and procedures aligned to security strategy, relevant regulations and industry best practices.
• Collaborate with cross-functional teams, service providers and other stakeholders to ensure consistent enforcement of policies and monitor compliance.
• Ensure the organization’s adherence to applicable compliance frameworks, internal control framework and guidelines set out by the Information Security department.
• Facilitate and lead governance and risk committee meetings to ensure consistent application of security standards and policies across all projects, technology platforms and services.

Security Audits and Assessments:

• Conduct regular security audits and risk assessments to identify vulnerabilities and consistently work towards the improvement of overall security maturity of the organization.

• Coordinate penetration testing and vulnerability assessments, interpreting results and driving remediation efforts.
• Prepare and present regular reports on security risk, compliance status and security posture to senior management and relevant stakeholders.

Security Awareness and Training:

• Develop and implement cybersecurity training programs for employees and technical teams to promote a culture of security awareness and compliance.
• Provide training on security best practices and conduct regular drills to test.

Requirements for Role of Manager Information Security

• Bachelor’s degree in Computer Science, Information Technology, or in a related field. Master’s degree is a plus.
• Professional security management certifications such as CISSP, CISM, CISA or other similar credentials.
• 7+ years experience in a combination of Information Security Governance, Risk, Compliance, and technology-related roles.
• Experience in security technologies such as EDR, VM, DLP, IPS, Firewalls, DevSecOps, SIEM, etc.
• Experience in leading and motivating cross-functional teams to achieve tactical and strategic goals.

Skills And Knowledge Desired

• Solid understanding of common information security standards, frameworks, and regulations such as ISO/IEC 27001, Cloud Security Alliance, NIST, PCI/DSS and GDPR.
• Knowledge and understanding of the major cloud platforms, Ecommerce, Integration and Customer Technologies.
• Exceptional problem-solving skills and a results-oriented mindset.
• Excellent communication, collaboration, and interpersonal skills.

Benefits

A competitive benefits package which includes health care, child education contribution, remote and flexible working policies as well as exclusive employee discounts.

Analyst FP&A Chalhoub Group UAE