assistant project manager

assistant manager

associate, financial crime compliance Jobs in Dubai

associate, financial crime compliance

cybersecurity consultant

internal audit manager

assistant manager cyber security assurance risk

DUBAI PROPERTIES GROUP LLC

An opportunity has arisen for an Assistant Manager – Cyber Security, Assurance & Risk to join Dubai Holding Asset Management. The main duties and responsibilities of this role:<ul><li>The role holder is responsible for supporting the implementation and monitoring of information security governance and compliance activities across DHAM and its entities.</li><li>This includes assisting with policy development, audits, awareness initiatives, and governance frameworks to ensure alignment with best practices (e.g., ISO 27001) and business requirements.</li><li>The role focuses on coordinating activities, maintaining documentation, and providing operational support to help strengthen the group’s overall</li></ul>Cybersecurity & Risk Management<ul><li>Support the IT and cybersecurity risk management framework, ensuring alignment with organizational objectives and regulatory requirements.</li><li>Identify, evaluate, and monitor technology-related risks across infrastructure, applications, cloud, and third-party vendors.</li><li>Work with stakeholders to implement mitigation measures, controls, and risk treatment plans.</li><li>Maintain the IT Risk Register, track remediation actions, and escalate risks/issues in line with governance processes.</li><li>Coordinate and conduct periodic risk assessments and workshops with business and IT stakeholders.</li><li>Track and report Key Risk Indicators (KRIs) and prepare risk dashboards and reports for management review.</li></ul>Assurance & Compliance<ul><li>Conduct assurance reviews and internal audits of security controls, IT processes, and regulatory compliance (e.g., ISO 27001, NIST, GDPR, UAE NESA, SCA).</li><li>Support internal and external audit engagements, ensuring timely closure of findings and recommendations.</li><li>Monitor assurance activities such as user access reviews, control checks, and compliance schedules.</li><li>Report on compliance status, exceptions, and remediation plans to management.</li><li>Maintain documentation and evidence to support governance, risk, and compliance (GRC) requirements.</li><li>Liaise with IT/security teams and vendors on incident reporting, documentation, and follow-up.</li></ul>Policy, Governance & Awareness<ul><li>Support the development, review, and enforcement of IT and cybersecurity policies, standards, and procedures.</li><li>Contribute to the implementation and continuous improvement of the IT Governance Framework, aligning with ISO 27001 and other standards.</li><li>Promote security awareness through training, communications, and awareness sessions across all business units.</li><li>Participate in governance and risk forums and support management reporting.</li></ul>Disaster Recovery (DR) & Business Continuity (BCM)<ul><li>Support the development, maintenance, and testing of Disaster Recovery (DR) and Business Continuity (BC) plans.</li><li>Coordinate DR/BC test planning, scheduling, execution, and documentation of results.</li><li>Track corrective actions, ensure remediation, and maintain centralized DR/BC documentation for audits and management reporting.</li></ul>Operational & Project Support<ul><li>Support group-wide information security, governance, and compliance initiatives.</li><li>Assist in managing IT governance and security projects, including coordination with vendors and service providers.</li><li>Gather data to identify gaps, support process improvements, and escalate issues where needed.</li><li>Track and report progress on information security and governance initiatives to senior management.</li></ul>

Assistant Manager – Cyber Security, Assurance & Risk

Palo Alto Networks

<div>Company Description 
Our Mission
At Palo Alto Networks&reg; everything starts and ends with our mission:
Being the cybersecurity partner of choice, protecting our digital way of life. 
Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
Who We Are
This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. 
Job Description 
Your Career
As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security.
We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today&rsquo;s cyber threat landscape.
Your Impact<ul><li>
Principal SOC Advisory<ul><li>
6+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation&rsquo;s security operations program, organisational structures, and capabilities</li><li>
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms</li></ul></li><li>
Defensive Security Skills (desired)<ul><li>
Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs</li><li>
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats.</li><li>
Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements</li><li>
Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment</li><li>
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li></ul></li><li>
Principal Cloud Security<ul><li>
6+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards</li><li>
Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)</li><li>
Experience with a Cloud Application Security Broker - MCAS, Netskope</li><li>
Possess a deep technical knowledge in CASBs, Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)</li><li>
Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)</li><li>
Knowledge of command-line interfaces or scripting tools in cloud environments is a plus</li></ul></li><li>
Cloud Security skills (desired)<ul><li>
Secure software development practices, including SecDevOps</li><li>
Sound knowledge of applicable frameworks &amp; standards, including OWASP, MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM &amp; ISO 27107</li><li>
Relevant industry certifications including CSCP</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li></ul></li><li>
Principal Cyber Risk Management<ul><li>
Experience in performing cyber security threat &amp; risk assessments to support the development of cyber security strategies and roadmaps</li><li>
Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others</li><li>
Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance</li><li>
Sound knowledge of applicable frameworks, including MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM</li><li>
Strong communication and presentation skills</li></ul></li><li>
Cyber Risk Management skills (desired)<ul><li>
Experience in threat modelling &amp; application security risk assessments, secure software development practices, including SecDevOps</li><li>
FAIR Open certified &amp; experience in applying FAIR for cyber risk quantification</li><li>
Relevant industry certifications including CISSP, CISM, CISA</li><li>
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC</li></ul></li></ul> 
Qualifications 
Your Experience<ul><li>
7+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one of the domains</li><li>
Experience managing a team of consultants</li><li>
Demonstrates a track record in strengthening existing and developing new client relationships</li><li>
Ability to strive in a startup environment</li><li>
Ability to perform travel requirements as needed to meet business demands</li><li>
Identified ability to grow into a valuable contributor to the practice and, specifically -<ul><li>
have an external presence via public speaking, conferences, and/or publications</li><li>
have credibility, executive presence, and gravitas</li><li>
be able to have a meaningful and rapid delivery contribution</li><li>
have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products</li><li>
be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team</li></ul></li><li>
Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience or equivalent military experience to meet job requirements and expectations</li></ul> 
Additional Information 
The Team
Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.<div></div>
Our Commitment 
 
We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
All your information will be kept confidential according to EEO guidelines.</div>

Principal Consultant

<div>
 
 Our Mission
 
 
 
 At Palo Alto Networks&reg; everything starts and ends with our mission:
 
 
 Being the cybersecurity partner of choice, protecting our digital way of life.
 
 
 Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we&rsquo;re looking for innovators who are as committed to shaping the future of cybersecurity as we are.
 
 
 
 Who We Are
 
 
 
 This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters.
 
 
 
 Job Description
 
 
 
 
 Your Career
 
 
 
 As a Principal Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security.
 
 
 We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today&rsquo;s cyber threat landscape.
 
 
 
 Your Impact
 
 
 
 <ul>
 <li>
 Principal SOC Advisory
 </li>
 <ul>
 <li>
 6+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation&rsquo;s security operations program, organisational structures, and capabilities
 </li>
 <li>
 Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms
 </li>
 </ul>
 <li>
 Defensive Security Skills (desired)
 </li>
 <ul>
 <li>
 Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs
 </li>
 <li>
 Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats.
 </li>
 <li>
 Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements
 </li>
 <li>
 Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment
 </li>
 <li>
 Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP
 </li>
 <li>
 Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
 </li>
 </ul>
 <li>
 Principal Cloud Security
 </li>
 <ul>
 <li>
 6+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards
 </li>
 <li>
 Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)
 </li>
 <li>
 Experience with a Cloud Application Security Broker - MCAS, Netskope
 </li>
 <li>
 Possess a deep technical knowledge in CASBs, Cloud Platforms and the dependencies around such an environment (WAF, SSO, Cloud Threats, API Security, Cloud Security Posture Management)
 </li>
 <li>
 Former experience with cloud migrations (cloud to cloud, or on-prem to cloud)
 </li>
 <li>
 Knowledge of command-line interfaces or scripting tools in cloud environments is a plus
 </li>
 </ul>
 <li>
 Cloud Security skills (desired)
 </li>
 <ul>
 <li>
 Secure software development practices, including SecDevOps
 </li>
 <li>
 Sound knowledge of applicable frameworks &amp; standards, including OWASP, MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM &amp; ISO 27107
 </li>
 <li>
 Relevant industry certifications including CSCP
 </li>
 <li>
 Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
 </li>
 </ul>
 <li>
 Principal Cyber Risk Management
 </li>
 <ul>
 <li>
 Experience in performing cyber security threat &amp; risk assessments to support the development of cyber security strategies and roadmaps
 </li>
 <li>
 Technical proficiency in a wide range of cyber risk management services, including cyber threat, risk and control assessments, secure software development practices, penetration testing, vulnerability assessments, among others
 </li>
 <li>
 Sound knowledge of applicable laws, compliance regulations, and industry standards as it relates to privacy, security, and compliance
 </li>
 <li>
 Sound knowledge of applicable frameworks, including MITRE ATT@CK &amp; D3FEND, CIS, NIST CSF, CSA CCM
 </li>
 <li>
 Strong communication and presentation skills
 </li>
 </ul>
 <li>
 Cyber Risk Management skills (desired)
 </li>
 <ul>
 <li>
 Experience in threat modelling &amp; application security risk assessments, secure software development practices, including SecDevOps
 </li>
 <li>
 FAIR Open certified &amp; experience in applying FAIR for cyber risk quantification
 </li>
 <li>
 Relevant industry certifications including CISSP, CISM, CISA
 </li>
 <li>
 Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
 
 </li>
 </ul>
 </ul>
 
 Qualifications
 
 
 
 
 Your Experience
 
 
 
 <ul>
 <li>
 7+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one of the domains
 </li>
 <li>
 Experience managing a team of consultants
 </li>
 <li>
 Demonstrates a track record in strengthening existing and developing new client relationships
 </li>
 <li>
 Ability to strive in a startup environment
 </li>
 <li>
 Ability to perform travel requirements as needed to meet business demands
 </li>
 <li>
 Identified ability to grow into a valuable contributor to the practice and, specifically -
 </li>
 <ul>
 <li>
 have an external presence via public speaking, conferences, and/or publications
 </li>
 <li>
 have credibility, executive presence, and gravitas
 </li>
 <li>
 be able to have a meaningful and rapid delivery contribution
 </li>
 <li>
 have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products
 </li>
 <li>
 be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team
 </li>
 </ul>
 <li>
 Bachelor&rsquo;s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security OR equivalent years of professional experience or equivalent military experience to meet job requirements and expectations
 
 </li>
 </ul>
 
 Additional Information
 
 
 
 
 The Team
 
 
 
 Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients&rsquo; security posture.
 
 
 
 Our Commitment
 
 
 
 We&rsquo;re problem solvers that take risks and challenge cybersecurity&rsquo;s status quo. It&rsquo;s simple: we can&rsquo;t accomplish our mission without diverse teams innovating, together.
 
 
 We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
 
 
 Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.
 
 
 All your information will be kept confidential according to EEO guidelines.
</div>

DICETEK LLC

<div>Key Responsibilities:<ul><li>Lead development, maintenance, and enforcement of cybersecurity policies, standards, and procedures.</li><li>Perform ISMS programs, internal audits, ISO certification cycles.</li><li>Perform cybersecurity risk assessments, risk treatment plans, and tracking</li><li>Coordinate BIA, BCP, and DR activities; and ensure alignment with ISO 22301.</li><li>Lead third-party security assessments, vendor onboarding security validation, and review of PT/MAST/API security scan reports.</li><li>Ensure compliance with UAE IA, Cyber security council , PDPL regulations and internal MOHRE frameworks.</li><li>Lead cybersecurity awareness programs and technical trainings for IT and business teams.</li><li>Oversee cybersecurity projects across Infra, Applications, Data, and Governance teams, ensuring secure design and implementation.</li><li>Prepare KPIs, audit trackers, and report findings to senior leadership
</li><li>Coordinate security reviews for new applications, APIs, cloud onboarding, and integrations.</li><li>Prepare cybersecurity awareness materials and conduct technical sessions.</li></ul> 
Experience:<ul><li>
8&ndash;12+ years of experience in experience in cybersecurity governance, GRC including proven leadership in technical and security-driven environments.</li><li>
Bachelor&rsquo;s degree in IT/Computer Science, Cybersecurity, or related field (postgraduate qualifications highly regarded).</li><li>
Deep knowledge of security frameworks (ISO 2700x, NIST CSF), risk management, and security architecture.</li><li>
Knowledge of ISO 27001, 22301, 20000, PDPL, NIST CSF, CIS controls.</li><li>
Experience managing audits, risk registers, policies, and compliance programs.</li><li>
Strong communication, and documentation skills</li></ul>
Certifications:<ul><li>CISM or equivalent certification CISSP/CRISC</li><li>ISO 27001 Lead Auditor/Implementer certification</li><li>Cloud security certifications (Azure/AWS Security).</li></ul></div>

Projects Manager – Policy Section

Cloud Dynamics DMCC

Cloud Dynamics is seeking an experienced B2B Sales Account Manager to join our growing team. The ideal candidate will have mandatory prior experience in selling cloud and cyber security solutions within a system integrator or reseller environment. This role requires a motivated, target-driven professional who is currently based in the UAE and brings a strong customer network.Key Responsibilities:<ul><li>Generate new sales opportunities through an existing customer network and prospecting activities</li><li>Manage and grow assigned client accounts, identifying opportunities for upselling and cross-selling</li><li>Build and maintain a healthy sales pipeline to consistently achieve revenue targets</li><li>Develop strong relationships with key decision-makers and stakeholders</li><li>Prepare and deliver sales presentations, proposals, and solution demonstrations</li><li>Collaborate with technical and pre-sales teams to ensure customer success</li></ul>Qualifications &amp; Requirements:<ul><li>Bachelor&rsquo;s degree in Business, Marketing, or a related field</li><li>3&ndash;5 years of UAE sales experience (strictly in Cloud and Cyber Security solutions)</li><li>Proven experience working with a system integrator or IT reseller</li><li>Strong understanding of cloud platforms and cyber security technologies</li><li>Self-motivated, target-oriented, and able to work independently</li><li>Excellent communication, negotiation, and relationship-building skills</li></ul>What We Offer:<ul><li>Hybrid work environment</li><li>Competitive compensation and performance-based incentives</li><li>Opportunity to work with cutting-edge cloud and cyber security solutions</li></ul>Job Types: Full-time, PermanentEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>cybersecurity sales: 2 years (Required)</li><li>working in a system integrator: 2 years (Required)</li></ul>Location:<ul><li>Dubai (Required)</li></ul>

B2B Account Manager - Cyber Security & Cloud

Crypto.com

<div>
 
 As a member of the ETMSA team at Crypto.com, you will be integral to responding to and managing cybersecurity threats and incidents throughout their lifecycle &ndash; from Preparation to Identification, Containment, Eradication, Recovery, and Lessons Learned &ndash; collaborating with a global team of incident responders.
 
 
 
 
 
 
 
 
 You will apply your comprehensive skills in cyber defense, digital forensics, log analysis, and intrusion analysis to address security incidents across our endpoints, network, and cloud infrastructure. In this role, you will be responsible for prevention, detection, response, and remediation activities, ensuring that information assets and technologies are adequately protected by leveraging various technologies such as Next-Generation Firewalls (NGFW), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Data Loss Prevention (DLP), and more.
 
 
 
 
 
 
 
 
 You will also leverage your collaboration and communication skills to work effectively with all relevant stakeholders in multicultural and global environments.
 
 
 -
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 
 
 
 - Report to Director to facilitate all phases in the incident response lifecycle
 
 
 - Be involved in various incident prevention projects to improve Security posture
 
 
 
 
 
 
 
 
 Preparation
 
 
 - Understand different regulatory and compliance requirements like critical time to report, escalation flows, etc.
 
 
 - Take part in self-assessment exercises like Tabletop Exercises, Attack Simulations, Red/Purple Team exercises to make sure the incident response process is working smoothly
 
 
 - Develop incident response runbooks, playbooks and SOPs with reference to different regulatory requirements
 
 
 - Evaluate the incident response readiness of different layers - people, process, technology
 
 
 
 
 
 
 
 
 Detection &amp; Analysis
 
 
 - Respond to the cyber security incidents escalated from various channels including the 24/7 SOC team.
 
 
 - Respond to cyber security incidents in compliance with the local authority / regulatory requirements.
 
 
 &nbsp;- Assess the risk, impact and scope of the identified security threats
 
 
 - Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against medium-term threats and IOCs
 
 
 
 
 
 
 
 
 Containment, Eradication and Recovery
 
 
 - Communicate with the stakeholders and provide guidance, recommendations to contain and eradicate the security incident
 
 
 - Participate in root cause analysis using forensic and other custom tools to identify any sources of compromise and/or malicious activities taking place.
 
 
 - Document and present investigative findings for high profile events and other incidents of interest.
 
 
 
 
 
 
 
 
 Post incident activities
 
 
 - Provide lessons learnt meeting to the stakeholders
 
 
 - Lead and keep track on the follow-up activities
 
 
 - Document the incident in the case management system and provide incident reports
 
 
 
 
 
 
 
 
 Always ready to jump in, in the event of security incidents.
 
 
 
 
 
 
 Requirements
 
 <ul>
 <li>
 At least 2 years experience in the Cyber Security industry
 </li>
 <li>
 Strong technical and analytical skills
 </li>
 <li>
 Familiar with the cyber security incident response process
 </li>
 <li>
 Familiarity with AI tools and their application in automating security tasks and processes
 </li>
 <li>
 Hands-on experience on performing incident response activities
 </li>
 <li>
 Have scripting experience like Bash, PowerShell, Python, Go, etc, and the ability to use these skills to aid in responding to incidents involving Windows, Linux, macOS, as well as cloud environment
 </li>
 <li>
 Have knowledge of cybersecurity tools and software like NGFW, EDR, IDS/IPS, EDR, DLP, SIEM, other log management platforms, etc
 </li>
 <li>
 Be familiar with the MITRE ATT&amp;CK Framework and/or Cyber Kill Chain
 </li>
 <li>
 Be passionate on exploring new technologies and having creative initiative to boost the team capabilities
 </li>
 <li>
 Holders of security related certifications is a plus (e.g.Azure, AWS, CISSP, GCIH, GCIA, GCFA, GNFA, GREM, or other equivalent)
 </li>
 <li>
 Awareness of regulatory and compliance requirements like GDPR, MAS, PSD2 etc is a plus
 
 
 </li>
 </ul>
 
 
 
 
 Preferably
 
 <ul>
 <li>
 Fast learner with can do attitude and ready to get the hands dirty
 </li>
 <li>
 A strong team player who can collaborate with compassion
 </li>
 <li>
 Passionate to learn and willing to put in the extra effort
 </li>
 <li>
 Understand the concept of ownership and accountability coupled with sense of urgency and prioritisation
 </li>
 <li>
 Confidence in handling incidents and managing relevant senior and technical stakeholders
 </li>
 <li>
 Possess business acumen/mindset (not only technical) when making critical decisions
 
 
 
 </li>
 </ul>
 
 
 
 
 
 
 We may use artificial intelligence tools to analyze the content of your Resume/CV against the specific requirements for the position. The purpose is to support our recruitment team in reviewing applications more effectively. These tools assist our recruitment team in their evaluation of your application by providing recommendations, but they do not replace human judgment. Final hiring decisions are ultimately made by humans who consider the insights generated by the tools along with other relevant information. If you would like more details about how your personal information is processed, please contact us.
 
</div>

Incident Response Engineer

Sun Technology Services

The Information Security Consultant is responsible for providing expert guidance on information security strategies, assessing risks, developing policies, and implementing solutions to safeguard the organization&rsquo;s data, systems, and infrastructure. The Information Security Consultant ensures compliance with cybersecurity standards and supports the organization&rsquo;s efforts in mitigating security threats and vulnerabilities.Security Operations &amp; Threat ManagementManage and operate security tools including SIEM, EDR, PAM, DLP, and IDS/IPS to detect, analyse, and respond to threats.Lead the response to security incidents and breaches, performing root cause analysis and implementing corrective and preventive actions.Proactively hunt for threats across the IT landscape, ensuring the security of core network assets, email gateways, and cloud services.Conduct regular vulnerability scans and coordinate penetration testing, validate findings, and drive remediation efforts with relevant teams.Monitor and optimize security logs and alerts to ensure effective detection.Security Architecture &amp; EngineeringProvide expert advice on secure system designs, network defenses, access controls, and encryption standards.Secure cloud configurations in multi-cloud environments, with hands-on expertise in Azure and Microsoft 365, including the implementation of logging, encryption, and secure DevOps practices.Implement and manage Identity &amp; Access Management (IAM) and Privilege Access Management (PAM) solutions, enforcing least privilege access through regular privilege audits and access reviews.Conduct security architecture reviews for new projects, applications, and integrations, ensuring alignment with best practices and compliance standards.Support Zero Trust adoption and embed security into the software development lifecycle (SDLC) by enforcing secure access principles, promoting secure coding practices, and integrating DevSecOpsEvaluate, recommend, and deploy security tools and technologies to strengthen the organization&rsquo;s defensive posture.Governance, Risk &amp; ComplianceDevelop, maintain, and implement corporate information security policies, standards, and procedures aligned with organizational processes and industry best practices.Assist in the maintenance and continual improvement of the Information Security Management System (ISMS), ensuring compliance and documentation aligned with key standards and regulations such as ISO 27001, ISO 20000-1, and UAE IA, PDPL., GDPRConduct risk assessments on internal systems, business processes, and third-party vendors to evaluate security controls and ensure compliance with corporate policies and regulatory requirements.Support internal and external audits by preparing documentation, evidence of controls, and responses to audit findings.Promote a strong security culture by supporting awareness and training programs, ensuring staff understand their compliance responsibilities.Define and track security KPIs and metrics to measure program effectiveness and report on risk posture to management.Reporting &amp; Continuous ImprovementPrepare clear and detailed reports on security incidents, risk assessment findings, audit outcomes, and remediation progress for management and stakeholders.Track and analyse security metrics, trends, and KPIs to measure control effectiveness and highlight areas for improvement.Capture lessons learned from incidents, tests, and assessments, and integrate them into security processes, playbooks, and awareness programs.Research emerging threats, new attack techniques, and innovative security tools to continuously strengthen detection and response capabilities.Participate in Business Continuity (BCP) and Disaster Recovery (DR) testing, as well as cyber crisis tabletop exercises, to validate preparedness and strengthen organizational resilience.SKILLS &amp; COMPETENCIES (Technical, Behavioral and Soft)Technical Competencies:Security Operations - Strong hands-on expertise in incident response, log analysis, IOC analysis and managing platforms like SIEM, EDR, PAM and DLP.Vulnerability Management - Proficiency with penetration testing and vulnerability assessment tools.Network &amp; Cloud Security &ndash; Strong knowledge of firewalls, IDS/IPS, WAF, VPNs, and security configurations in hybrid environments.Identity &amp; Access Management (IAM) and Privileged Access Management (PAM) &ndash; Experience with IAM/PAM solutions and implementing access controls, as well as data protection measures such as encryption and data classification.Other Competencies:Frameworks &amp; Standards: Familiarity with ISO 27001, ISO 20000-1, NIST CSF, MITRE ATT&amp;CK, and CIS Controls.Compliance: Experience with compliance efforts for regulations such as UAE Information Assurance (IA) Standards, PDPL and GDPR.Integrity and Compliance - Aligns all actions and decisions with organizational policies and procedures, demonstrating a strong commitment to professional standards and ethics.Analytical &amp; Problem-Solving Skills - Exhibits strong analytical, troubleshooting, and problem solving skills, with a proven ability to work effectively under pressure.Business Acumen - Understands the challenges and objectives of internal business units and takes the initiative to provide effective and pragmatic security solutions.Communication Skills - Possesses excellent written and verbal communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.Behavioural Competencies:Customer Focus - Understands customer challenges and takes initiative to resolve them effectively.Accountability and Ownership - Manages projects with minimal supervision and ensures quality results.Agility and Adaptability - Manages change smoothly and supports others during transitions.Collaboration &amp; Influence - Builds networks across functions and resolves conflicts constructively.Result Orientation - Sets clear goals and works proactively to achieve high performance.Job Type: Full-timePay: From AED1.00 per month

Information Security Consultant

Explore 3885+ Assistant manager cyber security assurance risk in Dubai this December. Find roles across top companies and apply now to boost your career.

3885 assistant manager cyber security assurance risk jobs IN Dubai

Assistant Manager – Cyber Security, Assurance & Risk

Principal Consultant

Principal Consultant

Projects Manager – Policy Section

B2B Account Manager - Cyber Security & Cloud

Incident Response Engineer

Information Security Consultant