Roles & Responsibilities

Established more than 40 years ago, the United Al Saqer Group (UASG) is one of the leading multi-sector business groups in the United Arab Emirates. The UASG owns and operates a diverse yet complementary portfolio of six UAE-based companies encompassing several key industry sectors, which includes Abu Dhabi Motors, Dalma Motors, Al Saqer Heavy Equipment, Al Saqer Property Management, Royal International Construction, and Royal Joinery. We are recruiting a Information Security Consultant to join our exceptional ICT Department. The person is responsible for providing expert guidance on information security strategies, assessing risks, developing policies, and implementing solutions to safeguard the organization s data, systems, and infrastructure. The Information Security Consultant ensures compliance with cybersecurity standards and supports the organization s efforts in mitigating security threats and vulnerabilities.

AREA OF RESPONSIBILITY:

Security Operations & Threat Management:

• Manage and operate security tools including SIEM, EDR, PAM, DLP, and IDS/IPS to detect, analyse, and respond to threats.
• Lead the response to security incidents and breaches, performing root cause analysis and implementing corrective and preventive actions.
• Proactively hunt for threats across the IT landscape, ensuring the security of core network assets, email gateways, and cloud services.
• Conduct regular vulnerability scans and coordinate penetration testing, validate findings, and drive remediation efforts with relevant teams.
• Monitor and optimize security logs and alerts to ensure effective detection and timely escalation of suspicious activities.

The Role

Lead

the organisation's cybersecurity and information security programme, ensuring

the confidentiality, integrity, and availability of information assets across a regulated financial services environment. Define and execute

security strategy, own and manage cyber risk within Board-approved appetite,

and maintain regulatory compliance within a cloud-native payments and stored

value facility (SVF) operation.

The role advises and recommends on security risk, with independent authority to escalate unresolved risk to the CTO, CEO, and Board Risk Committee.

Operates within an approved annual security budget; spend proposals require

cost-benefit justification and are prioritised within the allocated envelope.

Key Responsibilities

Security Strategy & Governance

• Define and maintain a multi-year cybersecurity strategy aligned with business growth, risk appetite, and regulatory
• obligations.
• Establish and maintain the information security policy framework, reviewed at least annually.
• Maintain the cyber risk register and own the security maturity roadmap against a recognised control framework (NIST CSF, CIS Controls,
• or ISO 27001).
• Own the security risk acceptance and exception register.
• P rov ide secu rity leadership and advisory to executive management and regulatory stakeholders
•