Manager

We are seeking a visionary leader to drive the security agenda at Emirates Telecommunications Group Company PJSC. The successful candidate will define and execute strategies to enhance security practices, integrate DevSecOps, and manage application and domain security. They will provide technical guidance, ensure compliance with internal and external standards, and foster a security-first culture. This role is pivotal in protecting the organization's digital assets and ensuring its resilience against evolving cyber threats.

Responsibilities

• Define and maintain security strategies for DevSecOps, application, and domain security, aligning with corporate and regulatory requirements.
• Develop and implement security governance frameworks for CI/CD pipelines, application development, and domain management.
• Translate strategic objectives into measurable KPIs, tracking progress and adjusting strategies as needed.
• Provide technical and managerial guidance to team members, supporting complex assessments and escalations.
• Integrate security controls into CI/CD pipelines, ensuring secure development lifecycle practices across application teams.
• Manage the Application Security program, including secure coding standards, threat modeling, and penetration testing.
• Lead security assessments of domains, ensuring compliance with internal and governmental regulations.
• Review and validate technical reports from security assessments, providing clear remediation recommendations.
• Ensure compliance with internal and external security standards, translating regulatory requirements into practical controls.
• Monitor and optimize security tool licensing, resource utilization, and project timelines, ensuring cost-effective coverage.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• 8 years of experience in information security, with a focus on application and network security.
• Proven leadership experience in managing security teams and driving strategic initiatives.
• Expertise in DevSecOps practices, including CI/CD pipeline security and secure development lifecycle.
• Strong knowledge of application security frameworks, tools, and best practices.
• Experience in conducting security assessments, penetration testing, and vulnerability management.
• Understanding of domain security, including DNS, TLS/SSL, and certificate management.
• Excellent communication and interpersonal skills, with the ability to collaborate across teams.
• Analytical mindset with a focus on data-driven decision-making and continuous improvement.