cybersecurity director

General Dynamics Information Technology

<p></p><div><div><div><p>Your Impact</p><p>
Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.</p><p>
Job Description</p><div><p>
Account Director</p><p></p><p>
Job Description</p><p>
Seize your opportunity to make a personal impact as an Account Director supporting state and local government information technology enterprise IT operations and maintenance (O&amp;M) and Cyber Security Operations services. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.</p><p></p><p>
At GDIT, people are our differentiator. As an Account Director, you will help ensure today is safe and tomorrow is smarter. The Account Director has overall responsibility for:</p><ul><li>
Serving as the point of accountability for the Services.</li><li>
Being the point of contact for all client communications concerning the program may be addressed.</li><li>
Act on behalf of GDIT in all day-to-day matters pertaining to the program and our contractual obligations.</li><li>
Have day-to-day responsibility for Service delivery, billing, and relationship management.</li><li>
Have day-to-day responsibility for ensuring customer satisfaction and attainment of all service levels.</li></ul><p></p><p>
HOW THE ACCOUNT DIRECTOR WILL MAKE AN IMPACT</p><ul><li>
Responsible for the cost, schedule, and technical performance of project.</li><li>
Directs all service delivery phases from inception.</li><li>
Organizes interdepartmental activities ensuring completion of the program on schedule and within budget constraints.</li><li>
Manages P&amp;L. Responsible for profitability and revenue growth of assigned program(s).</li><li>
Serves as the primary contact for the customer on matters pertaining to service delivery and quality.</li><li>
Ensures customer satisfaction and achieve designated business objectives.</li><li>
Collaborates with client leadership for risk identification and mitigation planning for concurrent projects to maintain schedule and support client success.</li><li>
Supervises assigned technical, professional, and administrative staff, including subordinate supervisors, and performs personnel actions including hiring and performance evaluation.</li><li>
Assures quality of program products, services, and deliverables, including participating in reviews, audits, and site visits.</li><li>
Coordinates and monitors sub-contractor activities and administers subcontractor deliverables and finances.</li><li>
Ability to manage complex cybersecurity implementations and coordinate delivery teams effectively.</li><li>
Develops, reviews, and approves plans, schedules, consulting agreements and other program documents.</li><li>
Prepares and provides various reports and technical reviews to senior management, as requested.</li><li>
Ensures compliance with relevant corporate and government policies and standards.</li></ul><p></p><p>
WHAT YOU&rsquo;LL NEED TO SUCCEED:</p><p></p><ul><li>
Education: Bachelor of Arts/Bachelor of Science, preferably in computer engineering, computer science, information systems, or related field of study. Work experience may be substituted.</li><li>
Required Experience: 10+ years of related experience.</li></ul><p><br>
Required Skills and Abilities:</p><ul><li>
Understanding of cybersecurity principles, frameworks (e.g., NIST, ISO 27001), and tools.</li><li>
Familiarity with threat intelligence, detection, incident response, and risk management strategies.</li><li>
Knowledge of security technologies like SIEM, firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint security, and vulnerability management.</li><li>
Understanding of IT systems, networks, and cloud infrastructure to advise clients on their cybersecurity needs.</li><li>
Awareness of current trends and emerging threats (e.g., ransomware, phishing, zero-day vulnerabilities).</li><li>
Familiarity with regulations like GDPR, CCPA, HIPAA, and relevant industry standards.</li><li>
Understanding industry-specific cybersecurity standards and requirements (e.g., financial services, healthcare, government).</li><li>
Excellent customer service skills</li><li>
Strong problem solving</li><li>
Excellent communication skills</li><li>
Knowledge of developing, documenting and implementation of business process and/or procedures</li><li>
Requires highly effective communication and interpersonal communication skills.</li><li>
Requires flexibility and willingness to work with a wide range of personalities on a variety of projects while prioritizing effectively.</li><li>
Requires strong analytic and problem-solving capabilities.</li><li>
Experience identifying solutions and recommendations that effectively address business and control needs along with how to train and guide others in this area.</li><li>
Program and Project Management</li><li>
Capacity to align cybersecurity programs with a client's business goals and budgets.</li><li>
Ability to create long-term plans for account growth and operational scalability.</li><li>
Proven ability to lead and inspire cross-functional teams in high-pressure environments.</li><li>
Strong decision-making and prioritization skills.</li><li>
Ability to guide and manage clients through incident response and recovery plans during emergencies.</li><li>
Certified Information Systems Security Professional (CISSP), a plus</li><li>
Certified Information Security Manager (CISM), a plus</li><li>
Certified Scrum Master (CSM) or Project Management Professional (PMP), a plus</li></ul><p></p><p>
Location: Austin, TX. Expect to work in office 2-3 days a week.</p><p>
Timeline: This is being posted contingent on contract award. Award is expected in April 2027. Work will not start full-time until after award of contract.</p><p></p><p>
GDIT IS YOUR PLACE:</p><ul><li>
Full-flex work week to own your priorities at work and at home</li><li>
401K with company match</li><li>
Comprehensive health and wellness packages</li><li>
Internal mobility team dedicated to helping you own your career</li><li>
Professional growth opportunities including paid education and certifications</li><li>
Cutting-edge technology you can learn from</li><li>
Rest and recharge with paid vacation and holidays</li></ul><p></p>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
10 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification<p>
Certified Information Security Manager (CISM) | Information Systems Audit and Control Association (ISACA) - Information Systems Audit and Control Association (ISACA)</p><p>
Project Management Professional (PMP) | Project Management Institute (PMI) - Project Management Institute (PMI)</p><p>
Certified Information Systems Security Professional (CISSP) | International Information System Security Certification Consortium (ISC2) - International Information System Security Certification Consortium (ISC2)</p></div><div></div><div>
Travel Required<div>
10-25%</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $170,000 - $230,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div>

IT Security Operations / Cybersecurity Program Director

Foxhole Technology

<div>Overview:
<div><b>
Job Title: Technical Director</b></div><div><b>
Clearance: Background Check</b></div><div><b>
Location: Austin, Texas (Hybrid)</b></div><div><b>
Start: Based on Contract Award</b></div><div></div><div><br>
Foxhole Technology provides robust cybersecurity and IT support capabilities for federal civilian and defense agencies. A recognized leader in navigating technology and security challenges, Foxhole delivers mission-focused innovations to answer evolving and complex needs. Our talented employee-owners provide agile, scalable services and solutions that solve operational gaps, operate critical systems, and protect and secure the enterprise &ndash; across the organization and around the world<b>.</b></div><div></div><div><br>
We are seeking a Technical Director to lead a cybersecurity team in support of a state agency. The Technical Director has overall accountability for delivery of cybersecurity requirements, technology planning, optimization, service evolution and innovation of services.</div>
Job Description:
<div>
The Technical Director will:</div><ul><li>
Serve as the single point of accountability for DIR concerning Security architecture, scaling, performance and Incident management of DIR&rsquo;s and Successful Respondent&rsquo;s technology.</li><li>
Develop and operate an overall cybersecurity risk management program based off the latest revision of NIST standards that integrates with the Shared Services&rsquo; Risk Program(s) for DIR&rsquo;s approval.
</li><li>Develop and leverage a Risk Management process to manage on-going Security Risk Management activities for the identification, analysis, quantification, management, and reduction of security risks in the DIR Shared Services environment.
</li><li>Establish operating procedures, protocols and coordination/communication mechanisms</li><li>
Establish an on-going Security Program that meets the external requirements according to security policies, contractual requirements, legislative requirements</li><li>
Oversee the production of an assessment and compliance report for all service assets that includes any identified vulnerabilities from continuous monitoring, threat hunting, and notable searches.</li><li>
Collaborate with leadership while using industry security best practices to provide ongoing insight and alignment of emerging technologies consistent within program and governmental security requirements.
</li></ul>Minimum Requirements:
<ul><li>A Bachelor's Degree in information technology, computer science, or a degree in a related field is preferred</li><li>
Minimum of 12 years of experience of progressive IT/Cyber experience.</li><li>
Possess applicable industry certifications such as CISSP or CISM.</li><li>
Must be able to pass a background check</li></ul>
More Information:
<div>
#MON</div><div></div><div><br>
Foxhole Technology offers a competitive benefits package for our employees and their dependents, including health, dental, and vision care, paid leave, retirement plans (401K, Roth, and ESOP), life and disability insurance, flexible spending accounts, and education and training assistance.</div><div></div><div><br>
Requirements of position: Think analytically, effective verbal and written communication skills, make decisions, observe/remember details, interpret data, concentrate on tasks, adjust to change, handle stress/emotions. Regular attendance, maintain work schedule, attend meetings, meet deadlines, keyboard/type, handle confidential information, use math/calculations, stay organized, operate office equipment, may direct others. Must be able to see, have eye/hand coordination, and lift up to 10 lbs. May be exposed to dust/dirt, humidity, and noise.</div><div></div><div><br>
Foxhole Technology is an Equal Opportunity Employer and makes hiring decisions without regard to race, color, religion, sex (including pregnancy, childbirth and sexual orientation), national origin, age, disability, genetic information, military/veteran status, or any other protected class.</div></div>

Technical Director

IRI Experts Doha

<p><b>Job Title:</b> Director of Information Security</p><p><b>Company:</b> IRI Experts Doha<br/><b>Location:</b> Barwa Village, Doha, Qatar<br/><b>Salary:</b> QAR 46,500 per month</p><p>Job Overview</p><p>IRI Experts Doha is seeking a highly experienced and strategic <b>Director of Information Security</b> to lead and manage the organization&rsquo;s cybersecurity strategy. This role is ideal for a senior professional with expertise in information security, risk management, and governance.</p><p>The Director of Information Security will be responsible for protecting organizational assets, ensuring compliance, and developing robust security frameworks.</p><p>Key Responsibilities</p><ul><li>Develop and implement comprehensive information security strategies and policies.</li><li>Oversee cybersecurity operations, risk management, and compliance programs.</li><li>Monitor threats, vulnerabilities, and incident response processes.</li><li>Ensure data protection, system security, and regulatory compliance.</li><li>Lead security audits, assessments, and continuous improvement initiatives.</li><li>Collaborate with IT and business units to strengthen security posture.</li><li>Manage security teams and external vendors.</li><li>Provide strategic guidance to leadership on security risks and mitigation.</li><li>Stay updated on emerging cybersecurity threats and technologies.</li></ul><p>Qualifications</p><ul><li>Bachelor&rsquo;s degree in Information Security, Computer Science, or related field.</li><li>Proven experience in cybersecurity leadership or information security roles.</li><li>Strong knowledge of security frameworks, risk management, and compliance standards.</li><li>Excellent analytical, leadership, and strategic thinking skills.</li><li>Strong communication and stakeholder management abilities.</li><li>Certifications such as CISSP, CISM, or equivalent are highly desirable.</li></ul><p>What We Offer</p><ul><li>Competitive salary of <b>QAR 46,500 per month</b></li><li>Leadership role with critical organizational impact</li><li>Professional and collaborative work environment</li><li>Opportunities for growth and specialization</li></ul><p><b>IRI Experts Doha is an equal opportunity employer.</b></p><p>نوع الوظيفة: دوام كامل</p><p>الراتب المدفوع: QAR٤٦٬٥٠٠٫٠٠&nbsp;لكل شهر</p><p>موقع العمل: بشكل شخصي</p>

Director of Information Security

Care New England Health System

<p></p><div><div><div><div><div><b>Department:</b></div> <div>CNE-IS ADMINISTRATION</div>
</div><br>
<div><div><b>Operating Unit</b></div> <div>Care New England
<br>
</div></div><br>
<div><div><b>Location:</b></div> <div>Warwick, RI
<br>
</div></div><br>
<div><div><b>Job ID:</b></div> <div>24299
<br>
</div></div><br>
<div><div><b>Job Status:</b></div> <div>Full Time
<br>
</div></div><br>
<div><div><b>Shift: </b></div><div>Days
<br>
</div></div><br>
<div><div><b>Schedule:</b></div> <div>Other<br>
<br>
</div></div><br>
</div></div><div><p><b>Job Summary:</b></p>
<p>The Director, Information Security holds primary responsibility for safeguarding the Care New England (CNE) computing environment. This includes securing systems across all CNE operating units, directing enterprise-wide cybersecurity strategy, and ensuring compliance with HIPAA, PCI, and all applicable federal, state, local, and industry regulations.</p>
<p>The Director serves as the Chief Information Security Officer (CISO) for CNE, providing leadership in risk assessment, incident response, regulatory compliance, and cybersecurity governance. The role oversees information security tools, policies, vulnerability assessments, and monitoring systems; responds to security threats; leads mitigation activities; and collaborates closely with IS teams, Audit/Compliance, HR, Finance, and Legal.</p>
<p>This leader develops and manages the Information Security program, directs security staff, sets security standards, leads incident management, evaluates emerging technologies, manages vendor relationships, and ensures organizational readiness through education, training, and participation in business continuity and disaster recovery planning.</p>
<p><b>Duties and Responsibilities:</b></p>
<ul><li>Develop and maintain the enterprise Information Security Program.
</li><li>Establish protection goals, objectives, and metrics aligned with organizational strategy.
</li><li>Serve as the Chief Information Security Officer (CISO) for CNE.
</li><li>Coordinate with the Chief Privacy Officer to ensure compliant reporting of security incidents.
</li><li>Implement, manage, and maintain enterprise security systems and applications.
</li><li>Lead vulnerability assessments and ensure timely remediation.
</li><li>Oversee security incident response, forensic investigations, and threat mitigation efforts.
</li><li>Examine emerging technologies and assess their security implications.
</li><li>Lead ongoing risk assessment programs addressing information security and privacy.
</li><li>Ensure compliance with HIPAA, PCI, and applicable state and federal regulations.
</li><li>Develop and implement security policies, standards, guidelines, and procedures.
</li><li>Coordinate with IS teams, Audit/Compliance, HR, Finance, and Legal to align security efforts.
</li><li>Participate in disaster recovery and business continuity planning.
</li><li>Lead security education and awareness initiatives for staff across CNE.
</li><li>Manage security vendors responsible for operations, maintenance, and enhancements.
</li><li>Ensure vendor service delivery aligns with organizational security requirements and policies.
</li><li>Negotiate and manage contracts and service-level agreements with external partners.
</li><li>Manage, mentor, and develop information security staff.
</li><li>Promote professional growth and maintain awareness of industry trends.
</li><li>Provide input on resource allocation and security budgeting.
</li><li>Maintain 24-hour on-call availability to support critical operational needs.
</li><li>Perform other job-related duties as assigned.</li></ul>
<p><b>Requirements:</b></p>
<p>Bachelor's Degree Required (computer science, MIS or related field)</p>
<p>Minimum of 7-10 years of progressive experience in information security, Strong technical background in infrastructure, network security, firewalls, and cloud environments, Experience conducting forensic investigations and managing enterprise security products.</p>
<p>Security certifications required: CISSP, GIAC, SANS, or similar. Audit certification preferred: CISA.</p>
<p>Participation in national and regional security organizations preferred.</p>
<ul><li>Deep knowledge of cybersecurity principles, threat landscapes, and protection technologies.
</li><li>Strong working knowledge of enterprise infrastructure, network security, firewalls, and cloud platforms.
</li><li>Expertise in vulnerability management, forensic investigation, risk assessment, and incident response.
</li><li>Ability to develop enterprise-wide policies and governance frameworks.
</li><li>Strong communication skills for engaging executive leadership and cross-functional stakeholders.
</li><li>Exceptional organization, analytical, and decision-making abilities.
</li><li>Ability to manage technical teams and develop staff.
</li><li>Strong vendor management and contract negotiation skills.
</li><li>Ability to maintain confidentiality and uphold ethical and regulatory standards</li></ul>
<p>Additional Information:
<br>
Care New England Health System (CNE) and its member institutions, Butler Hospital, Women &amp; Infants Hospital, Kent Hospital, VNA of Care New England, Integra, The Providence Center, and Care New England Medical Group, and our Wellness Center, are trusted organizations fueling the latest advances in medical research, attracting top specialty-trained doctors, and honing renowned services and innovative programs to engage in the important discussions people need to have about their health.</p>
<p>EEOC Statement: Care New England is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</p>
<p>Ethics Statement: Employee conducts himself/herself consistent with the ethical standards of the organization including, but not limited to hospital policy, mission, vision, and values.
<br>
Americans with Disability Act Statement: External and internal applicants, as well as position incumbents who become disabled must be able to perform the essential job-specific functions either unaided or with the assistance of a reasonable accommodation, to be determined by the organization on a case-by-case basis.</p></div></div><div></div>

Director Information Security

Qiddiya Investment Company

<div><p>The <b>Director of IT/OT Network &amp; Security Operations</b> is a critical leadership role within City Operations IT, responsible for the end-to-end management, reliability, and security of Qiddiya&rsquo;s converged IT and Operational Technology (OT) infrastructure.</p><p>
As Qiddiya transitions from construction to operations, this role will lead operational readiness, infrastructure acceptance, and the ongoing management of city-wide digital platforms, including fiber networks, active network equipment, smart city systems, and physical security networks (VMS, ACS, CCTV).</p><p>
The role serves as a key bridge between enterprise IT and industrial OT environments, ensuring seamless integration, high availability, and a robust cybersecurity posture across all city operations. It requires deep technical expertise in network architecture and security, alongside strong vendor management and cross-functional leadership to collaborate effectively with QTECH, MDU, District Master Developers, and third-party operators.</p><p></p><b>
Key Responsibilities</b><b>1. Operational Leadership &amp; Strategy</b><ul><li>
Lead the IT/OT Network and Security Operations function for Qiddiya City IT Operations.
</li><li>Define and execute the operational strategy for converged IT/OT environments, aligned with the City Operations Target Operating Model (TOM) and Qiddiya&rsquo;s digital vision.
</li><li>Establish and manage interfaces with the Network Operations Center (NOC) and Security Operations Center (SOC) for city-level infrastructure.
</li><li>Define, monitor, and enforce SLAs, KPIs, and performance metrics across internal teams and external service providers.
</li></ul><p></p><b>2. Infrastructure &amp; Network Operations</b><ul><li>
Oversee day-to-day operations, maintenance, and optimization of city-wide network infrastructure, including fiber backbone, MMRs, MDCs, and active network components.
</li><li>Manage the operational lifecycle of OT networks supporting smart city use cases across utilities, transportation, and facility management.
</li><li>Ensure high availability, resilience, and redundancy of critical network topologies supporting city operations.
</li><li>Lead incident management, root cause analysis, and resolution of complex IT/OT network issues.
</li></ul><p></p><b>3. Security Operations &amp; Governance</b><ul><li>
Oversee operational security systems and their supporting network infrastructure.
</li><li>Implement and monitor cybersecurity controls across OT environments, including network segregation, access control, and threat detection, aligned with QTECH cybersecurity standards.
</li><li>Coordinate vulnerability assessments, penetration testing, and security audits for city infrastructure.
</li><li>Ensure compliance with national cybersecurity regulations (e.g., NCA) and internal Qiddiya policies.
</li></ul><p></p><b>4. Transition, Handover &amp; Acceptance</b><ul><li>
Act as the primary City Operations IT authority for the acceptance and handover of network and security infrastructure from QTECH, MDU, and District Master Developers.
</li><li>Define operational readiness criteria, testing protocols, and documentation standards for onboarding new assets.
</li><li>Participate in design reviews to ensure operational, maintainability, and security requirements are embedded early in the lifecycle.
</li></ul><p></p><b>5. Vendor &amp; Stakeholder Management</b><ul><li>
Manage relationships and operational contracts with neutral hosts, data center operators, and managed service providers.
</li><li>Collaborate closely with QTECH Design teams to ensure alignment on architecture, shared services, and governance frameworks.
</li><li>Engage with Business Units (e.g., Transport, Utilities, Security) to ensure IT/OT infrastructure meets operational and use-case requirements.</li></ul><br>
<b>
Requirements</b><br>
<br>
<b>Education</b><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, Telecommunications, Cybersecurity, or a related engineering discipline.
</li></ul><p></p><b>Experience</b><ul><li>
12&ndash;15 years of progressive experience in network engineering, IT/OT operations, and cybersecurity, including at least 5 years in a senior leadership role.
</li><li>Proven track record in managing large-scale, mission-critical infrastructure within complex environments such as smart cities, giga-projects, utilities, or industrial sectors.
</li><li>Extensive experience bridging IT and OT environments, with a strong understanding of industrial control systems (ICS), SCADA, and IoT network architectures.
</li><li>Demonstrated experience in transitioning infrastructure from construction and delivery phases into stable, live operations.
</li></ul><p></p><b>Technical Skills &amp; Certifications</b><ul><li>
Deep expertise in network routing, switching, and topology design (e.g., Cisco, Juniper, or equivalent technologies).
</li><li>Strong knowledge of OT cybersecurity standards and frameworks (e.g., IEC 62443, NIST).
</li><li>Experience with physical security network infrastructure, including CCTV, VMS, and ACS systems.
</li><li>Relevant industry certifications are highly desirable, such as:
</li><li><ul><li><b>Networking:</b> CCIE, JNCIE, or equivalent.
</li><li><b>Security:</b> CISSP, CISM, GICSP, or equivalent.
</li><li><b>Service Management:</b> ITIL v4.
</li></ul></li></ul><p></p><b>Core Competencies</b><ul><li>
Strategic thinker with strong problem-solving and decision-making capabilities.
</li><li>Excellent stakeholder management and communication skills, with the ability to influence cross-functional teams and executive leadership.
</li><li>Ability to operate effectively in ambiguous, fast-paced, and evolving environments.
</li><li>Strong vendor management and contract negotiation expertise.</li></ul></div>

Director - City OPS IT/OT Network and Security Operations (DEL3)

Kent

<div><div><div><div><div><div>Location</div></div><div>
Dubai, United Arab Emirates</div></div><div><div><div>
Category</div></div></div><div></div><div><div><div>
Date Published</div></div><div>
05/05/26</div></div><div><div><div>
Status</div></div><div>
Open</div></div></div></div><div><div><div>
About you:
<br>
<b>Join us. Unleash your energy within.</b>
<br>
<br>
If you have world-class ambitions to reach the stars while keeping your feet on the ground, we&rsquo;re the team for you. We've created a new breed of company &ndash; future-focused with reimagined ambition across all disciplines within the energy sector.
<br>
<br>
We love people who know their own potential and are not afraid to use it. We know that together, we&rsquo;re far more than the sum of our parts. So, we celebrate people who want to grow and develop as we work together on some of the largest projects on the energy world stage.
<br>
<br>
We are committed to our diverse and inclusive community &ndash; a place where we can all be ourselves, thrive and develop. From day one, we offer a range of family-friendly, inclusive employment policies, flexible working arrangements, and employee networks to support staff from different backgrounds.
<br>
<br>
As an Equal Opportunities Employer, we value applications from all backgrounds, cultures, and abilities.
<br>
<br>
We&rsquo;re a disability-friendly employer and can make adjustments to support you to perform at your best during the recruitment process.
<br>
<br>
Our purpose and beliefs:
<br>
As Kent, we&rsquo;re tackling the greatest challenge of our time - to bring our world the energy it needs in the most responsible way ever imagined.
<br>
<br>
It&rsquo;s the energy of every member of our team driven by our beliefs that is making this happen. Whatever our skill, our language, or our culture. These beliefs define and direct us every day to be the very best - for ourselves, our clients, our key stakeholders, the communities we operate in and the planet:
<br>
<br>
We PLAY BIG
<br>
We thrive on EMOTIONAL AGILITY
<br>
We are FANATICAL ABOUT PERFORMANCE
<br>
We are built on INFINITE THINKING
<br>
<br>
Read more about the Purpose, Beliefs and Guiding Principles that drive us:
<br>
<br>
Our vision for Diversity, Inclusion and Belonging:
<br>
We recognise that diversity &amp; inclusion are catalysts for success. We&rsquo;re heightening awareness on the benefits of people diversity, diversity of experiences and diversity of our perspectives. Creating a culture of inclusivity where all employees feel a sense of belonging.
<br>
<br>
Our combined energy is fueled by different nationalities, across 6 continents and 24 countries. Our commitment is to celebrate character &ndash; no matter what ethnic background, gender, age, religion, identity, or disability.<p><b>
About the job:<br>
</b></p><p><br>
<b><i>Kent is looking for a Global IT Security and Compliance Director will be responsible for developing, implementing, and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program</i></b><i>. The role will provide the vision and leadership necessary to manage the risk to the Kent and will ensure business alignment, effective governance, systems, integrity, and confidentiality.</i></p><p><i>
As a key leader of Kent&rsquo;s CDIO office reporting directly to the Chief Digital and Information Officer the Global IT Security and Compliance Director, focuses on the governance, risk and compliance aspects of security within the business, The role holder shall further develop and maintain information security policies and processes, ensure appropriate technical cyber defence is in place and manage employee security awareness training. This role serves as a critical resource for employees and leaders regarding information security policy implementation, interpretation, and compliance. The roles assess and prioritises information security and cybersecurity risk across the organization, facilitates compliance with regulatory requirements and information security policies, and develops and reports on information security metrics monthly and maturity models.</i></p><p>
The role is responsible for reducing information security and cybersecurity risk to Kent by helping to prioritize and drive remediation efforts throughout the organization through the following:</p><ul><li>
Acting as a strategic partner to digital, engineering, and delivery leaders to enable secure innovation while managing enterprise, technology, and operational risk.</li><li>
Establishing Cyber Strategy and roadmap</li><li>
Establishing and maintaining governance and compliance standards.</li><li>
Conducting risk assessments to identify vulnerabilities internally and within vendor or third-party supplier products.</li><li>
Creating, maintaining, communicating, and enforcing information security policies.</li><li>
Advising CDIO and senior executive leadership on risk management, including risk mitigation, risk reduction, risk transfer, the risk exception process and residual risk analysis.</li><li>
Working with technical teams to ensure adequate cyber protection.</li><li>
Measuring and driving maturity improvements, adoption and creating security roadmaps</li><li>
Chair Kent&rsquo;s security council</li><li>
Represent as futuristic though leader on secure adoption of new application and AI technologies</li></ul><p>
The role supports the CDIO and advisory external consultancy on the execution of the Information &amp; Cyber Security Strategy</p><p><b>
Skills and Responsibilities:
</b><br>
<b>Responsibilities:</b></p><p><b><br>
Governance and Compliance</b></p><ul><li>
Develops and owns overall security strategy.</li><li>
Owns and manages process for Incident Detection, Containment, Analysis and Response.</li><li>
Evaluates new cybersecurity threats and IT trends and develops effective security controls.</li><li>
Oversees development of security awareness programs.</li><li>
Evaluates potential security breaches, coordinates response, and recommends corrective actions.</li><li>
Define and report on information security metrics.</li><li>
Review technology architectures and ensure alignment with security best practices.</li><li>
Provide governance and oversight for the secure and responsible adoption of AI technologies, including data privacy and protection, model risk, ethical considerations, and compliance with emerging regulatory expectations.</li><li>
Oversee security governance for engineering platforms, automation tools, and system integrations, ensuring appropriate controls, access management, and resilience aligned to Kent&rsquo;s digital delivery model.</li><li>
Provide governance and oversight of secure application development practices, ensuring security is embedded across the full software development lifecycle and modern DevOps delivery models.</li><li>
Maintains current knowledge of industry and regulatory trends and developments for the enterprise technology.</li><li>
Develops and oversees effective disaster recovery and BCP policies and standards to align with company business continuity management program goals. Coordinates development of implementation plans and procedures to ensure business critical services are recovered in the event of disasters or other incidents, and provides direction, support and in-house consulting in these areas.</li><li>
Develops, implements and maintains a monthly security risk reporting framework for management teams and governance committees.</li><li>
Designs and documents technical, administrative, and physical controls to ensure the business demonstrates compliance, ensuring that Kent meets both the requirements and intent of its regulatory and compliance obligations.</li><li>
Prepares for and facilitates external audit examinations. Works closely with external auditors and ensures requests are completed timely.</li><li>
Creates and manages an information security program.</li></ul><p><b>
Information Security Risk Assessment</b></p><ul><li>
Identifies, analyses, evaluates, and documents information security risks and controls based on established risk criteria.</li><li>
Conducts security risk assessments of planned and installed information systems to identify vulnerabilities and risks. Recommends controls to mitigate security risks identified via risk assessment process.</li><li>
Communicates risk findings and recommendations that are clear and actionable by business stakeholders.</li></ul><p><b>
Security Policy Management and Workforce Training and Awareness</b></p><ul><li>
Supports workforce security activities including culture, awareness, and training.</li><li>
Facilitates collection of evidence to support investigations of possible security or policy violations.</li><li>
Analyses information security incidents in collaboration with other stakeholders.</li><li>
Coordinates remediation and awareness training.</li><li>
Researches, recommends, and contributes to information security polices, standards, and procedures.</li><li>
Assists with the lifecycle management of information security policies and supporting documents.</li><li>
Works with other organisational participants to implement information security policies.</li></ul><p><b>
Third-party Supplier and Vendor Risk Management</b></p><ul><li>
Performs third-party supplier risk assessments to ensure supply chain risk is managed throughout the supplier's lifecycle.</li><li>
Assesses and reports on the risks and benefits for the business as well as mandates for supplier compliance.</li><li>
Articulates results of the final assessments to business stakeholders, project sponsors, program managers, and other internal parties.</li>
Assists with review of information security sections within supplier and client contracts, identifies gaps, and recommends security and data privacy content to close gaps.<br>
<li>
<br>
</li></ul><p>In addition to the responsibilities listed herein, the employee may be required to perform other ad-hoc tasks as needed or directed by the supervisor or management. These tasks will be within the reasonable scope of the employee's skills, capabilities, and role within the organization. The intent of this provision is to allow for flexibility and adaptability in meeting the dynamic needs of the organization, ensuring that operational requirements can be met efficiently. All such tasks will be assigned considering the employee's current workload and with respect to their professional development.</p><p><b>
Your knowledge/skills, education, and experience:
</b><br>
<b>Knowledge/ Qualification/ Training/ Certification:</b></p><ul><li>
Bachelor&rsquo;s degree from an accredited institution, with degree preferred in Computer Science or Information technology systems security or related field. Master&rsquo;s degree preferred.</li></ul><p><b>
Communication:</b></p><ul><li>
Excellent command of the English language in both oral and written communication and skills.</li></ul><p><b><br>
Behavior/ Core Competencies:</b></p><ul><li>
Minimum of ten (10) years within the last twelve (12) years of experience in the field related to the title of the position.</li><li>
Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Certification.</li><li>
Knowledge of Information technology infrastructure library (ITIL) (certification preferred) with respect to security administration and information technology governance in a multiplatform environment.</li><li>
Experience in establishing cybersecurity and risk metrics for reporting</li><li>
Strong Emotional Intelligence with demonstrated sustained leadership in a large organization involving multiple stakeholders.</li><li>
Demonstrated management skills, e.g. policy development and implementation, personnel administration, staff training and development. Demonstrated ability to work with diverse people; effective oral and written communication skills.</li>
Knowledge of Energy sector security requirements and regulations<br>
<li>
<br>
</li></ul><p><b>HSSEQ:</b></p><ul><li>
The Employee shall observe the Health, Safety, Sustainability, Environment and Quality rules of the Company; it&rsquo;s clients and the governing authorities of the host country.</li></ul><p><b>
Details about the role:
</b><br>
<b>Location:</b> UAE<br>
<b>Relocation required:</b> No<br>
<b>Travel required:</b> Yes<br>
<b>Contract type:</b> Permanent
<br>
<b>Experience level: </b>10+ years</p></div></div></div></div><div></div>

Global Cyber Security and Compliance Director

TotalShield Cybersecurity & Risk Solutions

<p><b>Job Title: Chief Information Security Officer (CISO)</b></p><p><b>About the Opportunity</b></p><p>TotalShield Cybersecurity &amp; Risk Solutions is seeking a visionary and experienced <b>Chief Information Security Officer (CISO)</b> to lead our cybersecurity strategy, risk governance, and enterprise security operations across Kuwait and the wider GCC region.</p><p>This is a high-impact executive role for a leader who thrives in building secure digital environments, managing enterprise risk, and guiding organizations through complex cyber threats.</p><p>If you are passionate about cybersecurity leadership, strategic risk management, and protecting critical infrastructure &mdash; this role offers strong career growth, regional influence, and executive-level responsibility.</p><p><b>What We Offer</b></p><ul><li>Competitive executive-level compensation package</li><li>Strategic leadership role with regional impact</li><li>Opportunity to build and lead a modern cybersecurity program</li><li>Exposure to enterprise, government, and critical infrastructure clients</li><li>Fast-growing environment with leadership autonomy</li></ul><p><b>Key Responsibilities</b></p><ul><li>Develop and execute enterprise-wide cybersecurity strategy and roadmap</li><li>Lead Security Operations Center (SOC), incident response, and threat intelligence functions</li><li>Establish governance, risk, and compliance (GRC) frameworks</li><li>Oversee cybersecurity architecture, cloud security, and infrastructure protection</li><li>Manage enterprise risk assessments and regulatory compliance (local and international standards)</li><li>Lead incident response planning and breach management</li><li>Advise executive leadership on cyber risk posture and mitigation strategies</li><li>Build and mentor high-performing cybersecurity teams</li><li>Coordinate with external auditors, regulators, and strategic partners</li><li>Ensure continuous improvement of security posture across all systems</li></ul><p><b>Candidate Profile</b></p><ul><li>Proven experience in senior cybersecurity leadership roles (CISO, Head of Security, Director-level)</li><li>Strong background in cybersecurity frameworks (ISO 27001, NIST, etc.)</li><li>Experience in SOC operations, risk management, and enterprise security architecture</li><li>Strong leadership, communication, and stakeholder management skills</li><li>Experience in government, enterprise, or regulated industries is highly preferred</li><li>Ability to operate in fast-paced, high-security environments</li></ul><p><b>Why Join Us</b></p><p>At TotalShield, you will shape the cybersecurity direction of a growing regional organization. This role offers executive influence, high visibility, and the opportunity to build security programs from the ground up while working with advanced technologies and enterprise clients.</p><p><b>Call to Action</b></p><p>If you are ready to take on a strategic leadership role in cybersecurity and make a regional impact, we encourage you to apply today. Join us in building secure digital futures across Kuwait and the GCC.</p><p>Job Type: Full-time</p><p>Pay: KD4,000.000 - KD7,000.000 per month</p><p>Work Location: In person</p>

Chief Information Security Officer (CISO)

Search 5113+ Cybersecurity director jobs near you this May. New roles added regularly across leading industries. Apply today.