Cyber Security Manager

Job Purpose

• Own end-to-end execution of entity-controlled cyber and SAFW requirements for Aldar Estates, reducing operational cyber risk while enabling safe delivery across estates operations, IoT/OT environments, and third-party ecosystems.
• Align and integrate with central SOC, security governance, and architecture functions for enterprise consistency

Roles, Responsibilities, Duties

Operating & Approval Radius

• R3 – high, end-to-end local execution: own risk-to-remediation closure for entity-controlled requirements, with named owner, target date, and closure evidence.
• A2 – bounded authority: approve local control actions within delegated thresholds; recommend higher-threshold risk acceptance with evidence-based decision packs; escalate material risk, regulatory-impact incidents, and repeated critical SLA breaches to central authority.

SAFW Entity Execution Ownership

• Endpoint hardening and health: baseline compliance, backlog closure, exception reduction, and evidence reporting.
• IoT/OT/robotics security: asset inventory, segmentation, onboarding checks, firmware and vulnerability remediation, and secure remote/vendor access.
• Local network exposure: enforce zoning and segmentation hygiene and close internet-facing high-risk exposures.

Risk Leadership & Action Closure

• Maintain a risk-prioritized entity cyber roadmap and produce evidence-based recommendations, ensuring approved actions are closed.
• Govern exception aging, compensating controls, and due-date integrity

Security Operations & Incident Resilience

• Partner with central SOC on detection and response; own local containment coordination and corrective-action closure.
• Convert post-incident lessons into local control changes and improve MTTD/MTTR and repeat-incident rates.

Third-Party & Supply-Chain Security

• Apply group security requirements to vendor onboarding and operations; drive closure of third-party findings with procurement, legal, and operational owners.
• Re-certify privileged and remote vendor access at defined cadence.

Governance & Architecture Alignment

• Align delivery with central policy, architecture standards, and assurance requirements; feed back local constraints; support audits with source-traceable evidence.

Entity vs Central SAFW Split

• Entity-owned (end-to-end): endpoint hardening, IoT/OT/robotics controls, local third-party enforcement, exception workflow, and incident corrective actions.
• Central-owned: SOC platform, group policy and standards, architecture baselines, and high-threshold risk acceptance.

Human + AI Workflow Model (First 12 Months)

• P1 AI-drafted documentation; P2 AI-assisted triage with human validation gates; P3 AI-orchestrated vulnerability, exception, and third-party risk workflows; P4 (stretch) KPI-driven workflow tuning.
• Guardrails: AI drafts and proposes; humans approve risk decisions, exceptions, and executive statements. Material recommendations need source-traceable evidence and confidence indication; no AI-only approvals.

Key Performance Indicators

• Critical vulnerability remediation within SLA (%), by risk tier; exception aging and closure rate by severity.
• End-to-end cycle time from risk detection to verified closure; repeat incident/control-failure rate.
• Automation coverage of priority workflows (%); AI recommendation override rate with root-cause classification.
• Alignment with Group Infosec Security Architecture and Governance Frameworks (%).

Education & Qualification:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• Preferred certifications: CISSP, CISM, CRISC, GIAC (or equivalent).
• Demonstrated delivery across governance, operational risk reduction, and cross-functional execution.
• Hands-on fluency in endpoint, network exposure, IoT/OT operational security constraints, and third-party security execution

Experience and Skills:

Industry Experience (No. of years):

• 10+ years in cyber security with leadership accountability in enterprise environments.

Competencies and Skills:

• Cyber security governance, operational risk reduction, and control assurance
• Endpoint, network exposure, and IoT/OT/robotics security
• Vulnerability, exception, third-party, and incident action closure
• Human plus AI workflow orchestration with verification and escalation discipline
• Executive communication, stakeholder alignment, and action-closure discipline
• Analytical thinking, risk judgment, problem-solving, and continuous improvement