Executive - Information Security

Job Purpose:

To support the implementation and day-to-day operation of Dubai Chambers’ information security and cybersecurity controls. The role assists with security monitoring, risk assessments, audits, incident handling, awareness activities, documentation, and Information Security Management System (ISMS) compliance to help protect information assets and maintain alignment with approved policies, ISO/IEC 27001, and applicable Dubai Government security requirements.

Key Accountabilities:

Information Security Operations

• Support the day-to-day operation and monitoring of information security systems, controls, and processes in accordance with approved policies, standards, and procedures.

• Review security alerts and logs using available security tools, document observations, and promptly escalate suspected threats, vulnerabilities, or control failures.

• Assist in tracking vulnerabilities, security findings, and remediation actions with relevant internal teams and service providers.

• Maintain accurate security records, registers, evidence, and operational documentation.

Risk, Compliance and Audit Support

• Assist in information security risk assessments by gathering information, documenting risks and controls, and maintaining risk and remediation trackers.

• Support internal and external audits by coordinating evidence, arranging meetings, recording findings, and following up on agreed corrective actions.

• Assist in monitoring compliance with the ISMS, ISO/IEC 27001, applicable Dubai Electronic Security Center (DESC) requirements, and internal security policies.

• Identify potential gaps or non-compliance and escalate them to the Manager – Information Security with clear supporting information.

Cybersecurity Incident Support

• Support the logging, triage, investigation, containment, and documentation of cybersecurity incidents under the direction of the Manager – Information Security.

• Maintain incident records, timelines, evidence, and action logs, and support post-incident reviews and lessons-learned activities.

• Follow approved incident response and escalation procedures and maintain appropriate confidentiality.

Policies, Procedures and ISMS Documentation

• Support the development, review, communication, and maintenance of information security policies, procedures, standards, guidelines, and templates.

• Maintain controlled versions of information security documents and ensure records are complete, current, and accessible to authorized stakeholders.

• Support the collection and reporting of ISMS performance data, control implementation status, and supporting evidence.

Security Awareness and Stakeholder Coordination

• Support the delivery of information security awareness campaigns, training sessions, phishing simulations, and related communications.

• Respond to routine information security queries and coordinate with employees, IT teams, vendors, and other stakeholders as required.

• Promote responsible use of Dubai Chambers’ information and technology resources and reinforce a positive security culture.

Qualifications & Experience:

Minimum Qualification

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, Information Technology, or a related discipline.

Minimum Experience and Skills

• 0–2 years of relevant experience in information security, cybersecurity, IT security, risk, compliance, or audit.

• Relevant internships, cooperative training, graduate projects, or national service experience may be considered.