assistant front office manager Jobs in Abu Dhabi

assistant front office manager

assistant restaurant manager - broadway Jobs in Abu Dhabi

assistant restaurant manager - broadway

data analyst

engineering manager

human resources manager Jobs in Abu Dhabi

human resources manager

cyber information and data security risk manager open finance

Al Etihad Payments

<div>
 <p>
  <strong>
   Cyber, Information and Data Security Risk Manager - Open Finance
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   About the Role
  </strong>
 </p>
 <p>
  Open Finance is seeking a proactive and detail-oriented
  <strong>
   Cyber, Information and Data Security Risk Manager
  </strong>
  to support the development, implementation, and continuous enhancement of the organization&rsquo;s risk management, compliance, and information security frameworks.
 </p>
 <p>
  This role is critical to ensuring adherence to applicable regulatory requirements &mdash; particularly those relating to Open Finance, cybersecurity, and data protection &mdash; while strengthening the organization&rsquo;s overall security and risk posture.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Develop, review, approve, and maintain a comprehensive suite of risk, compliance, and information security policies, including but not limited to:
  </li>
  <li>
   Cyber and Data Security
  </li>
  <li>
   Information Security
  </li>
  <li>
   Conduct Risk
  </li>
  <li>
   Outsourcing and Third-Party Risk
  </li>
  <li>
   TPP Oversight
  </li>
  <li>
   Operational Risk
  </li>
  <li>
   AML/CFT
  </li>
  <li>
   Develop, implement, and maintain information security policies, standards, and procedures, including oversight of the Security Incident Response Plan (SIRP).
  </li>
  <li>
   Establish and continuously enhance the Information Security Programme, ensuring alignment with the evolving threat landscape, regulatory requirements, and business operations.
  </li>
  <li>
   Develop and drive implementation of the Information Security Strategy and Operational Plans, including short-term (annual) and long-range initiatives.
  </li>
  <li>
   Implement and oversee the Vulnerability Management Program, including coordination of:
  </li>
  <li>
   Vulnerability assessments
  </li>
  <li>
   Penetration testing
  </li>
  <li>
   Security audits
  </li>
  <li>
   Relevant forensic/security investigations (where applicable)
  </li>
  <li>
   Ensure outcomes from security testing and assessments translate into measurable improvements in the organizations security posture.
  </li>
  <li>
   Ensure the compliance and risk framework effectively covers all relevant risk types, including:
  </li>
  <li>
   Cyber and information security risk
  </li>
  <li>
   Data protection risk
  </li>
  <li>
   Conduct risk
  </li>
  <li>
   API and technology risk
  </li>
  <li>
   Third-party/vendor risk
  </li>
  <li>
   Reputational risk
  </li>
  <li>
   Consumer protection risk
  </li>
  <li>
   Monitor compliance with applicable data protection and information security regulations, and internal policies relating to data handling, retention, protection, and minimization.
  </li>
  <li>
   Conduct risk and control assessments relating to cyber, technology, information security, outsourcing, and operational risk.
  </li>
  <li>
   Perform periodic security and data protection reviews/audits, preparing findings, risk ratings, and remediation plans.
  </li>
  <li>
   Stay abreast of:
  </li>
  <li>
   Emerging technologies
  </li>
  <li>
   Evolving cyber threats
  </li>
  <li>
   Information security risks
  </li>
  <li>
   Regulatory and supervisory developments and ensure timely updates to controls, policies, and security frameworks.
  </li>
  <li>
   Assess and understand the security implications of new technologies, establishing governance processes to ensure secure adoption and regulatory compliance.
  </li>
  <li>
   Collaborate closely with Technology, Information Security, Risk, and Compliance teams to identify, assess, and mitigate cyber and data-related risks.
  </li>
  <li>
   Support internal control testing, regulatory reviews, and audits, including remediation tracking and closure validation.
  </li>
  <li>
   Report key risk themes, control gaps, and remediation progress to Senior Management and Governance Committees.
  </li>
  <li>
   Support protection of critical systems and infrastructure, ensuring confidentiality, integrity, and availability, including systems supporting Open Finance and payment-related operations.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications &amp; Experience
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Law, Finance, Risk Management, Compliance, or a related discipline.
  </li>
  <li>
   3&ndash;6 years of experience in compliance, risk management, or regulatory roles, preferably within financial services, fintech, or Open Finance environments.
  </li>
  <li>
   Strong knowledge of regulatory requirements, data protection, cybersecurity, and risk management frameworks.
  </li>
  <li>
   Hands-on experience with audits, regulatory reporting, and policy development.
  </li>
  <li>
   Professional certifications (e.g., CAMS, CRCM, ICA, CISA) are considered an advantage.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Skills &amp; Competencies
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical, risk assessment, and problem-solving skills
  </li>
  <li>
   Excellent written and verbal communication abilities
  </li>
  <li>
   High attention to detail with strong documentation capabilities
  </li>
  <li>
   Ability to work effectively across functions and engage with senior stakeholders
  </li>
  <li>
   High ethical standards and strong awareness of confidentiality and data protection obligations
  </li>
 </ul>
 <p>
 </p>
</div>


Cyber Information and Data Security Risk Manager - Open Finance

Confidential

<div>
 <p>
  The Project Manager &ndash; IT Infrastructure is responsible for planning, coordinating, and delivering IT infrastructure projects that support the organization&rsquo;s operational and business objectives. The role focuses on internal environments, managing internal IT resources, coordinating infrastructure-related orders, and translating requirements from business departments into secure, compliant, and sustainable infrastructure solutions in close alignment with the Head of Infrastructure &amp; Cyber Security.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  1. Deliver end-to-end IT infrastructure projects including data center upgrades, server rooms, network and security enhancements, compute, storage, virtualization, backup, and infrastructure platforms.
 </p>
 <p>
  - Convert approved business and operational requirements into clear project scope, schedules, budgets, and deliverables.
 </p>
 <p>
  - Ensure projects align with IT strategy, architecture standards, and cybersecurity requirements.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  2. Requirements Management &amp; Business Coordination
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Act as the primary coordination point for infrastructure requirements from business and corporate departments.
 </p>
 <p>
  - Work with stakeholders to clarify requirements, priorities, feasibility, and dependencies.
 </p>
 <p>
  - Ensure requirements are approved through IT governance and aligned with infrastructure and security standards.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  3. Resource Coordination
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Coordinate activities across IT infrastructure teams including network, systems, virtualization, storage, backup, and cybersecurity implementation teams.
 </p>
 <p>
  - Manage schedules, task dependencies, and priority conflicts in coordination with IT management.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  4. Alignment with Infrastructure &amp; Cyber Security Leadership
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Work closely with the Head of Infrastructure &amp; Cyber Security to ensure projects align with infrastructure strategy and cybersecurity posture.
 </p>
 <p>
  - Apply security-by-design principles throughout project delivery.
 </p>
 <p>
  - Escalate risks, issues, and cross-department dependencies appropriately.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  5. Procurement &amp; Order Management
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Coordinate infrastructure-related purchase requests for hardware, software, licenses, and renewals.
 </p>
 <p>
  - Validate technical specifications and Bills of Materials (BoM).
 </p>
 <p>
  - Track orders, deliveries, and dependencies with procurement and finance teams.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  6. Governance, Risk &amp; Change Management
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Ensure compliance with IT governance processes including architecture review, security approval, and change management.
 </p>
 <p>
  - Identify, track, and manage project risks, issues, and dependencies.
 </p>
 <p>
  - Manage scope, schedule, and cost changes through formal change control.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  7. Quality, Security &amp; Compliance
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Ensure infrastructure implementations comply with internal IT policies, cybersecurity requirements, and audit obligations.
 </p>
 <p>
  - Coordinate security reviews and validations.
 </p>
 <p>
  - Support internal and external audits by providing accurate project documentation.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  8. Reporting, Documentation &amp; Handover
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Maintain project charters, plans, schedules, RAID logs, and status reports.
 </p>
 <p>
  - Ensure proper handover of completed projects to IT operations and support teams.
 </p>
 <p>
  - Capture lessons learned and ensure documentation supports operational continuity.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  Required Qualifications &amp; Experience
 </p>
 <p>
  Education
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Bachelor&rsquo;s degree in Information Technology, Computer Engineering, Telecommunications, or a related discipline.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  Experience
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Minimum of 7 years of experience in IT project management.
 </p>
 <p>
  - Proven experience delivering internal and external IT infrastructure projects.
 </p>
 <p>
  - Experience working in government or semi-government environments is strongly preferred.
 </p>
 <p>
 </p>
 <p>
 </p>
 <p>
  Skills &amp; Competencies
 </p>
 <p>
  <br/>
 </p>
 <p>
  - Strong understanding of enterprise IT infrastructure and cybersecurity domains.
 </p>
 <p>
  - Ability to translate business requirements into technical solutions.
 </p>
 <p>
  - Strong coordination, communication, and stakeholder management skills.
 </p>
 <p>
  - Ability to operate independently at a G5 professional level.
 </p>
 <p>
 </p>
</div>


Project Manager – IT Infrastructure  Abu Dhabi

Electro Mechanical Co LLC

<p>:</p><ul><li>Experience of 5+ Years in OT cybersecurity with strong technical expertise in ICS/SCADA systems and OT protocols.</li><li>Experience in OT Cybersecurity Frameworks and Standards (Local and Regional) - NESA UAE IA, IEC/ISA 62443,NIST</li><li>Experience in Cybersecurity Governance &ndash; Policies, Processes, Procedures and Guidelines</li><li>Experience in Conducting Cyber Risk Assessment across the OT environment</li><li>OT Security Architecture based on Purdue Model</li><li>IEC62443 Knowledge and Architecture - L4, L3.5 DMZ, L3, L2, L1 and L0</li><li>Experience in OT Cybersecurity Controls</li><li>Experience in Layer 2 /Layer3 Networks</li><li>NGFWs</li><li>IDS and IPS</li><li>Network Access Control</li><li>EDR Whitelisting and Anti-Virus</li><li>Removable Media Control</li><li>Industrial Anomaly Sensor</li><li>Data Diodes</li><li>VPN / Remote Terminal Services</li><li>Backup and Restoration</li><li>Incident Response Capabilities on OT</li><li>Creating IR Playbooks for OT</li><li>Experience in create OT SIEM Monitoring and Threat Detection Use Cases</li><li>Knowledge in FDS, DDS, FAT and SAT</li><li>Certified - GISCP, CISSP, CISA, ISO 27001 LA, ISA 62443 fundamentals, Fortinet NSE</li><li>Knowledge and experience with OEMs &ndash; Honeywell, Yokogawa, Schneider, SIEMENS etc</li></ul><p>:</p><ul><li>Will be responsible to prepare the documents such as Cyber Functional Design document, FAT,SAT Procedures</li><li>Design and deploy &amp; Maintain security controls and technologies to safeguard OT assets, including firewalls, intrusion detection/prevention systems, antivirus software, and encryption tools</li><li>Collaborate with engineering teams and engage stakeholders for tailored solutions.</li><li>Conduct/ support Factory Acceptance Tests &amp; Site acceptance test with customer</li></ul><p>Job Type: Full-time</p>

OT Cyber Security Engineer

Raqmiyat

<div><div><h3 class="jobSectionHeader"><b>Job Information</b></h3>
<ul><div><p>Date Opened</p>
<div><b>02/18/2026</b><b>
</b></div></div><div><p>Job Type</p>
<div><b>Full time</b><b>
</b></div></div><div><p>Job Opening Status</p>
<div><b>In-progress</b><b>
</b></div></div><div><p>Work Experience</p>
<div><b>5+ years</b><b>
</b></div></div><div><p>Industry</p>
<div><b>Government/Military</b><b>
</b></div></div><div><p>City</p>
<div><b>Abu Dhabi</b><b>
</b></div></div><div><p>State/Province</p>
<div><b>Abu Dhabi</b><b>
</b></div></div><div><p>Country</p>
<div><b>United Arab Emirates</b><b>
</b></div></div><div><p>Zip/Postal Code</p>
<div><b>51133</b><b>
</b></div></div></ul></div><div><h3 class="jobSectionHeader"><b>About Us</b></h3>
<div><div>Raqmiyat is a UAE-based IT and digital transformation company specializing in consulting, staffing, and enterprise technology solutions. We empower banking, government, and enterprise clients across the Middle East to achieve their digital objectives.</div><br>
</div><p></p><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><p>We are looking for a highly experienced Information Security Expert to support and strengthen the organization&rsquo;s cybersecurity posture across governance, risk management, technical security, and operational security functions.</p><p><br>
The ideal candidate will have strong experience in enterprise security environments and hold relevant certifications such as <b>CISSP, CISM, CEH, or equivalent</b>.</p><p><br>
This role requires hands-on expertise combined with strategic thinking to support security initiatives from planning through execution.</p><p></p><p><b><br>
Key Responsibilities</b></p><p><b><br>
1. Governance &amp; Compliance</b></p><br>
<ul><li>
Develop, review, and maintain information security policies, standards, procedures, and guidelines.<br>
</li><li>
Ensure alignment with international security frameworks such as <b>ISO 27001/27002, NIST CSF, NIST SP 800 series, CIS Controls</b>, and applicable regulatory requirements.<br>
</li><li>
Conduct gap assessments and support internal/external audits and compliance reviews.<br>
</li><li>
Prepare compliance reports and management presentations.<br>
</li><li>
Support the establishment and enhancement of information security governance structures (e.g., security committees, risk committees, incident response teams).</li></ul><p></p><p><b><br>
2. Risk &amp; Security Management</b></p><br>
<ul><li>
Perform enterprise-wide information security risk assessments (IT and OT environments).<br>
</li><li>
Identify, analyze, and document security risks across applications, infrastructure, cloud, and operational systems.<br>
</li><li>
Develop and track risk treatment and mitigation plans aligned with business objectives.<br>
</li><li>
Facilitate risk acceptance and reporting processes.<br>
</li><li>
Support third-party/vendor risk management activities, including supplier security assessments and due diligence reviews.<br>
</li><li>
Maintain and monitor the organization&rsquo;s cybersecurity risk register.</li></ul><p></p><p><b><br>
3. Technical Security &amp; Advisory</b></p><br>
<ul><li>
Provide guidance on secure architecture design, defense-in-depth, and zero-trust principles.<br>
</li><li>
Review and validate security configurations across networks, servers, databases, cloud platforms, applications, and endpoints.<br>
</li><li>
Support vulnerability management activities including vulnerability assessments and penetration testing.<br>
</li><li>
Provide remediation guidance based on risk prioritization.<br>
</li><li>
Stay updated on emerging cyber threats, attack trends, and evolving security technologies.<br>
</li><li>
Advise on security tools, architecture improvements, and best practices.</li></ul><p></p><p><b><br>
4. Security Operations &amp; Incident Support</b></p><br>
<ul><li>
Support day-to-day security operations and collaborate with the SOC team.<br>
</li><li>
Assist in monitoring, detection, and response activities.<br>
</li><li>
Participate in incident investigations, root cause analysis, and remediation efforts.<br>
</li><li>
Review and optimize SIEM alerts and security monitoring rules.<br>
</li><li>
Support tabletop exercises, disaster recovery drills, and cybersecurity readiness activities.</li></ul><p></p><h3 class="jobSectionHeader"><b><br>
Requirements</b></h3><p><b>
Required Qualifications &amp; Experience</b></p><br>
<ul><li>
Bachelor&rsquo;s degree in Information Security, Computer Science, IT, or related field.<br>
</li><li>
8+ years of experience in Information Security or Cybersecurity roles within enterprise environments.<br>
</li><li>
Professional certifications such as <b>CISSP, CISM, CEH, ISO 27001 Lead Implementer/Auditor</b>, or equivalent.<br>
</li><li>
Strong understanding of security frameworks (ISO 27001, NIST, CIS Controls).<br>
</li><li>
Experience in risk management, compliance, vulnerability management, and security operations.<br>
</li><li>
Exposure to cloud security (AWS, Azure, or GCP) is an advantage.<br>
</li><li>
Experience working with SIEM, EDR, firewall, and other enterprise security tools.<br>
</li><li>
Strong communication and stakeholder management skills.</li></ul></div></div></div><p></p>

Information Security Professional / Information Security Expert

scichem Agricultural Investement - L.L.C-S.P.C

<p>Hiring - IT Specialist</p><p>Location: Abu Dhabi</p><p><b>We are looking for a dedicated IT professional to manage our clinic&rsquo;s technical infrastructure while ensuring full compliance with Abu Dhabi Department of Health (DOH) regulations. </b></p><p>The ideal candidate will have hands-on experience with ADHICS standards and Malaffi system integration. Department of Health Abu Dhabi</p><p><b>Key Responsibilities:</b></p><ul><li>Regulatory Compliance:</li></ul><p>Ensure the clinic adheres to ADHICS (Abu Dhabi Healthcare Information and Cyber Security) standards to maintain licensing eligibility.</p><ul><li>System Integration:</li></ul><p>Oversee the onboarding and maintenance of the Malaffi Health Information Exchange and ensure real-time data sharing.</p><ul><li>Data Privacy:</li></ul><p>Implement protocols to ensure all patient data is stored locally in the UAE, in accordance with Federal Law No. (2) of 2019.</p><ul><li>IT Support:</li></ul><p>Provide daily technical support for hardware, software, and Electronic Medical Record (EMR) systems.</p><ul><li>Network Security:</li></ul><p>Manage firewalls, backups, and secure remote access to protect clinical data.</p><p><b>Apply: </b></p><p>send your CV to : '0563950363</p><p>Job Type: Full-time</p>

IT Support

<div></div><div><div>JOB PURPOSE:</div>
<div>
To assist the Principal Auditor in conducting and delivering internal audit services for a specific assignment. The senior auditor shall under the guidance of the Manager IA , carry out parts of the overall audit while ensuring that professional standards are met, areas of non-compliance are identified and addressed to mitigate the risk.</div><br>
<div></div>
<div>
KEY ACCOUNTABILITIES:</div>
<div>
Policies, Processes &amp; Procedures</div>
<div>
Implements approved departmental policies, processes and procedures to ensure that work is carried out in accordance with the professional standards issued by The Institute of Internal Auditors.</div>
<div>
Day-to-Day Operations</div>
<div>
Implements the day-to-day operations assigned for the Internal Audit function to ensure compliance with the established standards and procedures and EGA audit methodology.</div>
<div>
Risk Assessment and Audit Plans</div>
<div>
Participates in the risk assessments carried out by the Senior Manager/Manager for the assigned area of responsibility.</div>
<div>
Internal Audit Activities</div>
<div>
Carries out parts of the overall audit including but not limited to: a) participating in determining the audit approach including risk analysis and process mapping; b) conducting the testing of internal controls; c) identify process improvements and cost reduction opportunities; and d) assess the adequacy of internal controls</div>
<div>
Documentation</div>
<div>
Prepares work papers to ensure that the audit objectives and the quality standards are met and working papers or audit files are maintained as per Internal Audit methodology</div>
<div>
Corrective Actions</div>
<div>
Assists in developing suitable recommendations to mitigate/remediate the observations made and risks highlighted. In particular this will include ensuring that all accepted recommendations are given clear implementation deadlines or clearly identified as not being accepted.</div>
<div>
Ensures that Senior Manager IA / Principal Auditor is informed in a timely manner regarding critical issues to enable quick correction and mitigation of further occurrences.</div>
<div>
Carries out the periodic follow-up of recommendations and report on status of implementation.</div>
<div>
Reports</div>
<div>
Prepares draft observations pertaining to the work assigned as per the required format for review by the audit team leader</div>
<div>
Management Requests and Fraud Investigation</div>
<div>
Participate in ad-hoc reviews based on management requests and/or fraud investigations, as directed by more senior members of the Internal Audit team</div>
<div>
Safety, Quality &amp; Environment</div>
<div>
Complies with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment</div>
<div>
AUTHORITY/ DECISION MAKING:</div>
<div>
The Senior Auditor is required to interact and maintain effective working relationships with line management of the assigned area of responsibility.</div>
<div>
QUALIFICATIONS &amp; SKILLS:</div>
<div>
Minimum Qualifications:</div>
<div>
Bachelor&rsquo;s degree in Finance / Accounting / Engineering and working towards a professional qualification from a recognised International Accounting Institutes (e.g. CPA/CIMA/CMA/CA)</div>
<div>
Audit related professional qualification such as CIA or CISA</div>
<div>
Minimum Experience:</div>
<div>
Minimum of 3-6 years internal audit / relevant business process experience in a large manufacturing company or with the Big4 audit firms.</div>
<div>
Skills:</div>
<div>
Knowledge of the manufacturing industry with particular exposure to the metal industry in general and Aluminium industry in particular.</div>
<div>
Intermediate knowledge of IIA Standards on Professional Practice and Code of Ethics</div>
<div>
Intermediate knowledge of international corporate/IT governance, risk and internal controls frameworks such as COSO, ERM, COBIT, etc.</div>
<div>
Good analytical and observation skills. Knowledge of data analysis techniques and computer assisted audit tools such as ACL/IDEA would be an advantage.</div>
<div>
Adequate language skills (English) and effective communication skills, both written and oral.</div>
<div>
Must have sufficient knowledge to be able to identify red flags in the processes and be able to assess the risk of fraud stemming therefrom.</div><br>
<div></div>
<div>
One or more of the following:</div>
<div>
o Intermediate knowledge of IT processes including IT Governance, IT ISO, IT Security, etc.</div>
<div>
o Intermediate knowledge of the Aluminium smelting plant processes and operations including technical aspects</div>
<div>
o Intermediate knowledge of IFRS, finance function, accounting practices, JVs, financial analysis, etc.</div>
<div>
o Intermediate knowledge of processes such as HR, supply chain, marketing &amp; sales, treasury etc.</div></div><div></div>

Senior Auditor

M42 Health

<div>
 <strong>
  Overview
  <br/>
  <br/>
 </strong>
 M42 is a global health champion powered by artificial intelligence (AI), technology and genomics to advance innovation in health for people and the planet. Headquartered in Abu Dhabi, M42 combines its specialized, state-of-the-art facilities with integrated health solutions like genomics and biobanks, and harnesses advanced technologies to deliver precise, preventive and predictive care, to disrupt traditional healthcare models and positively impact lives globally.
 <br/>
 <br/>
 The role is responsible for developing, implementing, and maintaining an Information Security Framework, including policies, standards, and processes aligned with international best practices and regulatory requirements. The position plays a critical role in managing information security risks, ensuring regulatory compliance, overseeing security projects, responding to incidents, and strengthening security awareness across the organization. The role will also evaluate and supervise information security controls, develop security metrics, and build strong relationships with internal and external stakeholders to support M42&rsquo;s healthcare objectives.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develop, implement, and maintain an enterprise-wide Information Security Framework aligned with international standards (e.g., ISO 27001, ISO 27701, HIPAA) and regulatory requirements (e.g., ADHICS, ADGM, GDPR, NESA).
  </li>
  <li>
   Define and execute the information security and compliance strategy in alignment with M42 objectives, recommending appropriate controls, tools, and technologies.
  </li>
  <li>
   Establish and operate a healthcare-focused information security risk management framework aligned with M42 enterprise risk management practices.
  </li>
  <li>
   Conduct technology risk assessments for new business initiatives and IT projects, including driving Risk Control Self-Assessments (RCSA).
  </li>
  <li>
   Ensure appropriate management visibility of security risks, including impact, mitigation plans, and associated costs.
  </li>
  <li>
   Perform regulatory gap analysis, industry benchmarking, and control maturity assessments to identify improvement opportunities.
  </li>
  <li>
   Develop, monitor, and report information security and IT risk metrics, including KRIs and KPIs.
  </li>
  <li>
   Lead the planning and delivery of information security initiatives and projects in line with regulatory and business requirements.
  </li>
  <li>
   Investigate, manage, and respond to information security and data privacy incidents, including maintaining and testing the incident response plan.
  </li>
  <li>
   Oversee the implementation, monitoring, and effectiveness of information security and IT controls across the healthcare environment.
  </li>
  <li>
   Coordinate with IT GRC, internal audit, and external audit teams to implement regulatory and audit recommendations.
  </li>
  <li>
   Manage regulatory submissions (including ADHICS) and remediate identified compliance gaps.
  </li>
  <li>
   Direct internal teams and external service providers to ensure the protection of information assets and adherence to security policies and standards.
  </li>
  <li>
   Build strong relationships with key stakeholders across M42 IT and Healthcare functions and represent Information Security in internal and external audits.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s or Master&rsquo;s degree in IT, Computer Science, Software Engineering, or a related field.
  </li>
  <li>
   5-10 years of professional experience in Information Security, with a minimum of 5 years within the healthcare industry.
  </li>
  <li>
   Proven experience in information security governance, risk management, compliance, and security operations.
  </li>
  <li>
   Strong knowledge of healthcare and data protection regulations (e.g., ADHICS, HIPAA, GDPR, HITRUST, DOH).
  </li>
  <li>
   Hands-on experience conducting technology risk assessments and Risk Control Self-Assessments (RCSA).
  </li>
  <li>
   Solid understanding of international security standards and frameworks (e.g., ISO 27001, ISO 27701).
  </li>
  <li>
   Experience working with cloud security architectures and cloud service models.
  </li>
  <li>
   Excellent written and verbal communication skills, with the ability to explain security and risk concepts to technical and non-technical audiences.
  </li>
  <li>
   Strong stakeholder management skills, including engagement with senior leadership, auditors, and regulators.
  </li>
  <li>
   Relevant industry certifications such as CISA, CISM, CISSP, CCSP, or cloud security certifications (Azure/AWS).
  </li>
  <li>
   Experience working in the UAE or similar regulated healthcare environments (preferred).
  </li>
  <li>
   ITIL v4 certification (preferred).
  </li>
 </ul>
</div>


Information Security, Senior Analyst

Explore 1639+ Cyber information and data security risk manager open finance in Abu Dhabi this March. Find roles across top companies and apply now to boost your career.