Requirements
The ideal candidate will possess a Bachelor's degree in InfoSec, Computer Science, Risk Management, or related fields. Preferred certifications include CISSP, CISM, CRISC, ISO 27001 LA/LI, and PCI DSS. Strong skills in information security frameworks, risk governance, documentation, analysis, stakeholder engagement, strategic thinking, and execution are essential.
Description
Job description / Role
Job Type
Full Time
Job Location
Dubai, UAE
Nationality
Any Nationality
Salary
Not Specified
Gender
Not Specified
Arabic Fluency
Not Specified
Job Function
Legal
Company Industry
Software & Internet Services
Role overview
The senior security and compliance officer will lead the end-to-end implementation and oversight of the organization's information security governance, risk management, and compliance (GRC) initiatives. The role is dedicated to ensuring alignment with global standards and regional regulatory frameworks within a highly regulated environment.
Key responsibilities
Governance & compliance
Manage full lifecycle compliance with ISO/IEC 27001, PCI DSS v4.0.1, NIST, UAE PDPL, UAE Central Bank regulations, and other applicable laws.
Develop, review, and maintain information security policies, procedures, and governance documents.
Serve as the single point of contact for InfoSec compliance.
Risk management
Lead technology and information security risk assessments across all domains.
Maintain centralized risk registers with clear ownership, treatment plans, and traceability.
Provide regular risk posture reports and validate remediation effectiveness.
Audit & regulatory oversight
Plan and manage audits, inspections, regulatory assessments, and certifications.
Coordinate internal and external stakeholder responses and ensure closure of findings.
PCI DSS v4.0.1 compliance
Own PCI DSS compliance program, including scoping, assessment coordination, remediation, and documentation management.
Track scope-impacting changes in systems or vendors.
Awareness & training
Design and manage induction and awareness programs via LMS platforms.
Automate training lifecycle and track compliance for audit readiness.
Vendor & third-party risk
Perform third-party risk assessments and ensure contractual compliance with InfoSec, PCI DSS, and CPR requirements.
Continuous improvement
Monitor regulatory changes and drive maturity improvements across GRC processes and tooling.
Qualifications & experience
Education: Bachelor’s in InfoSec, Computer Science, Risk Management, or related fields.
Certifications (preferred): CISSP, CISM, CRISC, ISO 27001 LA/LI, PCI DSS.
Core skills
Deep understanding of information security frameworks and risk governance.
Strong documentation, analytical, and stakeholder engagement capabilities.
Ability to operate independently with strategic thinking and execution.
Success metrics
Sustained PCI DSS and regulatory compliance.
Timely risk remediation and validated risk closures.
Strong audit performance and visibility of risk posture improvements.
Requirements
Academic, vocational qualification:
Bachelor degree from an accredited college or university in computer science, information security or related fields.
Apply Now