Cyber Security Manager

About this opportunity

Job Purpose Own end-to-end execution of entity-controlled cyber and SAFW requirements for Aldar Estates, reducing operational cyber risk while enabling safe delivery across estates operations, IoT/OT environments, and third-party ecosystems. Align and integrate with central SOC, security governance, and architecture functions for enterprise consistency Roles, Responsibilities, Duties Operating & Approval Radius R3 – high, end-to-end local execution: own risk-to-remediation closure for entity-controlled requirements, with named owner, target date, and closure evidence. A2 – bounded authority: approve local control actions within delegated thresholds; recommend higher-threshold risk acceptance with evidence-based decision packs; escalate material risk, regulatory-impact incidents, and repeated critical SLA breaches to central authority. SAFW Entity Execution Ownership Endpoint hardening and health: baseline compliance, backlog closure, exception reduction, and evidence reporting. IoT/OT/robotics security: asset inventory, segmentation, onboarding checks, firmware and vulnerability remediation, and secure remote/vendor access. Local network exposure: enforce zoning and segmentation hygiene and close internet-facing high-risk exposures. Risk Leadership & Action Closure Maintain a risk-prioritized entity cyber roadmap and produce evidence-based recommendations, ensuring approved actions are closed. Govern exception aging, compensating controls, and due-date integrity Security Operations & Incident Resilience Partner with central SOC on detection and response; own local containment coordination and corrective-action closure. Convert post-incident lessons into local control changes and improve MTTD/MTTR and repeat-incident rates. Third-Party & Supply-Chain Security Apply group security requirements to vendor onboarding and operations; drive closure of third-party findings with procurement, legal, and operational owners. Re-certify privileged and remote vendor access at defined cadence. Governance & Architecture Alignment Align delivery with central policy, architecture standards, and assurance requirements; feed back local constraints; support audits with source-traceable evidence. Entity vs Central SAFW Split Entity-owned (end-to-end): endpoint hardening, IoT/OT/robotics controls, local third-party enforcement, exception workflow, and incident corrective actions. Central-owned: SOC platform, group policy and standards, architecture baselines, and high-threshold risk acceptance. Human + AI Workflow Model (First 12 Months) P1 AI-drafted documentation; P2 AI-assisted triage with human validation gates; P3 AI-orchestrated vulnerability, exception, and third-party risk workflows; P4 (stretch) KPI-driven workflow tuning. Guardrails: AI drafts and proposes; humans approve risk decisions, exceptions, and executive statements. Material recommendations need source-traceable evidence and confidence indication; no AI-only approvals. Key Performance Indicators Critical vulnerability remediation within SLA (%), by risk tier; exception aging and closure rate by severity. End-to-end cycle time from risk detection to verified closure; repeat incident/control-failure rate. Automation coverage of priority workflows (%); AI recommendation override rate with root-cause classification. Alignment with Group Infosec Security Architecture and Governance Frameworks (%). Education & Qualification: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field. Preferred certifications: CISSP, CISM, CRISC, GIAC (or equivalent). Demonstrated delivery across governance, operational risk reduction, and cross-functional execution. Hands-on fluency in endpoint, network exposure, IoT/OT operational security constraints, and third-party security execution Experience and Skills: Industry Experience (No. of years): 10+ years in cyber security with leadership accountability in enterprise environments. Competencies and Skills: Cyber security governance, operational risk reduction, and control assurance Endpoint, network exposure, and IoT/OT/robotics security Vulnerability, exception, third-party, and incident action closure Human plus AI workflow orchestration with verification and escalation discipline Executive communication, stakeholder alignment, and action-closure discipline Analytical thinking, risk judgment, problem-solving, and continuous improvement