VP - Information Security, Information Technology

About the Role We are looking for a VP – Information Security to lead the organization’s information security strategy, governance, risk, compliance, and cybersecurity operations. The role will be responsible for protecting the organization’s information assets, strengthening cybersecurity resilience, and advising senior leadership on cyber risk, security posture, regulatory compliance, and emerging security threats. Core Responsibilities - Lead the enterprise information security strategy, roadmap, policies, and governance framework. - Oversee cybersecurity risk management, regulatory compliance, audits, and security controls. - Manage security operations, including SOC oversight, incident response, threat monitoring, and vulnerability management. - Drive cloud security, data protection, identity and access management, and secure technology adoption. - Establish and maintain third-party/vendor security risk management practices. - Support business continuity, disaster recovery, and cyber resilience activities. - Ensure security is embedded across IT infrastructure, applications, digital transformation, and AI-related initiatives. - Provide executive-level reporting on cybersecurity risks, security posture, incidents, and remediation plans. - Lead, coach, and develop information security teams and external security partners. - Promote cybersecurity awareness and a strong security culture across the organization. Requirements - Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field. - Master’s degree in a relevant field is preferred. - Minimum 10-15 years of experience in IT, Information Security, or Cybersecurity. - Minimum 5 years in a senior leadership role within Information Security or Cybersecurity. - Strong experience in cybersecurity governance, risk management, compliance, SOC operations, and incident response. - Experience in regulated or critical sectors such as aviation, defense, government, energy, healthcare, banking, or telecom is preferred. - Strong knowledge of frameworks and standards such as ISO 27001, NIST, UAE IA/NESA, PDPL, PCI DSS, or similar. - Professional certifications such as CISSP, CISM, CISA, CRISC, CGEIT, CCSP, or ISO 27001 are preferred. - Strong leadership, stakeholder management, analytical, and decision-making skills. - Fluency in English is required; Arabic is an advantage. Recruitment Fraud Alert Please be cautious of fraudulent job offers from individuals or organizations falsely claiming to represent GAL. GAL will never request personal financial information, bank account details, or any form of payment as part of the recruitment process. All candidates are interviewed either in person or through video or telephone interviews before a formal employment offer is made. If you are asked to pay money or share sensitive financial information, please consider it a scam.

• Manager - Information Security Office

  Community Development Authority · Dubai, United Arab Emirates

• Application Administrator ( Information Security ) (UAE National)

  Dubai Careers - A Smart Dubai Initiative · Dubai, Dubai, United Arab Emirates

• Information Security Engineer

  GBM · Dubai, Dubai, United Arab Emirates

• Chief Information Security Officer

  Cyberr · United Arab Emirates

• Assistant Vice President – Information Security.RMG Information Security & Technology.Risk Management

  Mashreq · United Arab Emirates

• Expert Opportunity - Head of Information Security ($90/hr, up to $1,800/week)

  Ethos · Dubai, Dubai, United Arab Emirates