Shamal Holding is a diversified investment firm that cultivates the extraordinary. Born in Dubai, we curate a unique portfolio of extraordinary investments, experiences and assets to generate meaningful outcomes. The investments we make are strategically chosen and thoughtfully nurtured, mirroring Dubai’s ambition, spirit and energy. As a global investor, asset owner and developer we utilise our resources, know-how and connections, to deliver long-term value, wherever we operate.
As Shamal Holding continues to grow, we’re in search of an
Assistant Manager - Cybersecurity. In this role you will contribute in strengthening the organisation’s security posture by implementing core controls and supporting risk‑reduction initiatives. The role enhances threat detection and response capabilities while promoting secure‑by‑design practices across technology projects. It works closely with cross‑functional teams to improve security governance and ensure safe adoption of cloud, digital, and AI‑enabled solutions. The position contributes to building a resilient environment that meets current security needs and evolves to address emerging threats.
Strategic Responsibilities
- Support the development and execution of the organisation’s cybersecurity strategy and roadmap.
- Strengthening IT & Security Architecture, security-by-design adoption across technology initiatives through collaboration with infrastructure, applications, data, and product teams.
- Contribute to enhancing enterprise resilience by aligning cybersecurity practices with digital, cloud, and AI‑driven transformation.
- Promote standardised security controls, policies, and governance across the business.
Core Responsibilities
- Attend and respond to Security Operations Centre (SOC) alerts and incidents, ensuring timely investigation, escalation, and remediation.
- Manage administration and review all alerts generated by PAM, EDR, NDR, Dark Web Monitoring, Email Security system. Triage and investigate new security alerts and potential incidents, ensuring timely escalation and remediation where required.
- Run monthly vulnerability scans on all websites. Review remediation actions taken by developers and ensure no critical or high‑severity findings remain open.
- Continuous improvement of cybersecurity controls across networks, cloud, applications, and endpoints.
- Enhance threat detection, incident response, and vulnerability management through modern tooling and automation.
- Conduct risk assessments, ensure compliance with internal policies and regulatory requirements, and coordinate remediation activities.
- Support security monitoring, investigations, and reporting to reduce risk exposure and strengthen operational resilience.
- Manage third-party security assessments and ensure supplier compliance with cybersecurity standards.
Others
- Conduct end-user Security Awareness Training and phishing simulations on regular basis.
- Manage the Security Exception process, including evaluation, documentation, and approval workflows, ensuring appropriate risk ownership and timely closure.
- Work in liaison with Infrastructure team to deliver high‑quality security operations result.
- Ensure continuous learning, and proactive skill set enhancement as per emerging threats.
- Build & enhance capabilities in areas such as cloud security, incident response, threat management, and governance.
- Bachelor’s degree in Computer Science, Information Security, or a related discipline.
- Industry certifications such as Security+, CEH, CCSP, OffSec, OSCP or equivalent are strongly preferred.
- 6 years of hands‑on experience in cybersecurity operations, including incident response, SOC activities, and vulnerability management.
- Good understanding of cloud security, IAM, network security, and compliance frameworks such as ISO 27001 and NIST.
- Strong analytical, communication, and stakeholder‑management skills with experience working across technology teams.
For more information about Shamal, please visit our LinkedIn page https//www.linkedin.com/company/shamalholding/
Note
Due to a high influx of profiles, only shortlisted candidates will be contacted.
