مدير البنية التحتية لتقنية المعلومات والحوسبة السحابية والأمن السيبراني

Job Summary

The Manager – Network, Cloud and Cybersecurity is responsible for leading the organisation’s enterprise network, cloud infrastructure and cybersecurity operations. The role ensures that IT systems are secure, resilient, scalable and aligned with business requirements.

The position will oversee network architecture, hybrid and multi-cloud environments, cybersecurity governance, identity and access management, security monitoring, disaster recovery, technology vendors and infrastructure transformation projects. The role requires a strong combination of technical expertise, strategic planning and team leadership.

Network Infrastructure Management

• Lead the design, implementation and management of enterprise network infrastructure across offices, factories, data centres and remote locations.

• Manage LAN, WAN, WLAN, SD-WAN, VPN, routing, switching, firewalls and internet connectivity.

• Ensure network availability, performance, redundancy and security across all business locations.

• Monitor network performance and resolve recurring availability, latency and capacity issues.

• Implement network segmentation, secure remote access and appropriate firewall policies.

• Manage network transformation, consolidation and optimisation projects.

• Maintain accurate network diagrams, configurations, inventories and technical documentation.

Cloud Infrastructure Management

• Develop and implement the organisation’s cloud and hybrid infrastructure strategy.

• Manage cloud environments across Microsoft Azure, AWS, GCP or other approved platforms.

• Lead the migration of suitable on-premises systems and services to cloud platforms.

• Manage cloud networking, virtual machines, storage, backup, disaster recovery and identity services.

• Ensure cloud environments are secure, scalable, cost-effective and compliant with organisational policies.

• Monitor cloud consumption, licensing and costs and recommend optimisation opportunities.

• Establish cloud governance standards covering access, security, configuration, monitoring and resource management.

• Manage Microsoft 365, Azure Active Directory or Microsoft Entra ID and related collaboration platforms.

Cybersecurity Management

• Develop and implement cybersecurity strategies, policies, procedures and technical controls.

• Manage Security Operations Centre and Managed Security Service Provider activities.

• Oversee Security Information and Event Management, endpoint protection and threat-monitoring solutions.

• Lead vulnerability assessments, penetration testing and remediation programmes.

• Manage cybersecurity incidents, investigations, containment, recovery and post-incident reviews.

• Implement and monitor firewalls, intrusion detection and prevention systems, email security, web application firewalls and endpoint security.

• Oversee data-loss prevention, information classification, encryption and cloud-security controls.

• Conduct cybersecurity risk assessments and maintain risk and remediation registers.

• Coordinate security-awareness programmes, phishing simulations and employee training.

Identity and Access Management

• Establish and maintain identity and access-management processes.

• Manage Active Directory, Microsoft Entra ID, Single Sign-On and Multi-Factor Authentication.

• Ensure appropriate role-based access controls and privileged-access management.

• Conduct periodic user-access reviews and ensure timely access removal during employee offboarding.

• Strengthen access controls for business applications, infrastructure, cloud services and third-party users.

Governance Risk and Compliance

• Develop and maintain IT security policies, standards and operating procedures.

• Ensure alignment with applicable cybersecurity, data-protection and privacy requirements.

• Support certification and compliance programmes such as ISO 27001, ISO 20000, NIST or other relevant frameworks.

• Coordinate internal and external audits and ensure timely closure of identified findings.

• Evaluate technology and security risks associated with vendors, systems and new projects.

• Provide regular risk, compliance and cybersecurity reports to senior management.

Business Continuity and Disaster Recovery

• Develop and maintain IT disaster-recovery and business-continuity plans.

• Ensure critical systems, network services and business data are adequately backed up and recoverable.

• Conduct periodic disaster-recovery testing and document the results and improvement actions.

• Define recovery time and recovery point objectives in coordination with business stakeholders.

• Ensure infrastructure resilience, high availability and appropriate system redundancy.

IT Operations and Service Management

• Ensure network, cloud and security services meet agreed service levels and business requirements.

• Manage incidents, problems, changes, service requests, configuration items and IT assets in accordance with ITIL practices.

• Establish monitoring and reporting for the health, capacity and availability of infrastructure and security systems.

• Identify recurring operational issues and implement permanent corrective actions.

• Support critical incidents and participate in after-hours escalation when required.

Projects and Digital Transformation

• Lead network, cloud, data-centre and cybersecurity transformation projects.

• Prepare project scopes, technical specifications, statements of work, bills of quantities and implementation plans.

• Evaluate proposed technologies and recommend appropriate technical solutions.

• Coordinate system testing, migration, deployment, documentation and operational handover.

• Ensure projects are completed within the approved scope, budget and timeline.

Vendor and Budget Management

• Manage relationships with cloud providers, telecom operators, cybersecurity partners and managed-service providers.

• Develop RFPs, review proposals and conduct technical and commercial evaluations.

• Monitor vendor performance against contracts, service-level agreements and project deliverables.

• Prepare and manage operational and capital budgets for network, cloud and cybersecurity requirements.

• Identify opportunities to reduce costs while maintaining security, service quality and operational resilience.

Team Leadership

• Lead, coach and develop network, cloud, infrastructure and cybersecurity team members.

• Define team objectives, responsibilities, performance measures and development plans.

• Coordinate internal teams and external service providers during incidents and projects.

• Promote a culture of security, accountability, continuous improvement and knowledge sharing.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering or a related discipline.

• A master’s degree in Information Technology, Cybersecurity or Business Administration would be an advantage.

• Relevant professional certifications are strongly preferred, such as:

  • CCNP, CCIE or equivalent networking certification

  • Microsoft Azure Administrator, Solutions Architect or Security certification

  • AWS Solutions Architect or Security certification

  • CISSP, CISM, CCSP, CEH or equivalent cybersecurity certification

  • ISO 27001 Lead Implementer or Lead Auditor

  • ITIL certification

  • TOGAF certification

Experience Requirements

• Minimum 10–15 years of progressive experience in IT infrastructure, enterprise networking, cloud technologies or cybersecurity.

• At least 5 years of experience in a managerial or technical leadership position.

• Strong experience managing enterprise networks across multiple locations.

• Demonstrated experience with hybrid or multi-cloud environments, preferably Azure and AWS.

• Experience managing SOC, MSSP, SIEM, VAPT and cybersecurity incident-response activities.

• Experience with identity and access management, Microsoft 365, Active Directory and Microsoft Entra ID.

• Proven experience delivering infrastructure, cloud, network or cybersecurity transformation projects.

• Experience managing vendors, managed services, technology budgets and service-level agreements.

• UAE or GCC experience within a large multi-site organisation would be preferred.

Technical Competencies

• Enterprise routing, switching, wireless networking and SD-WAN

• Firewalls, VPN, IDS/IPS, proxy and web application firewall

• Microsoft Azure, AWS and hybrid-cloud architecture

• Microsoft 365, Active Directory and Microsoft Entra ID

• SIEM, SOC operations and managed-security services

• Endpoint detection and response and endpoint protection

• Vulnerability assessment and penetration testing

• Identity and access management, SSO and MFA

• Data-loss prevention and information classification

• Virtualisation technologies such as VMware and Hyper-V

• Backup, disaster recovery and high-availability solutions

• Infrastructure and security monitoring platforms

• ISO 27001, NIST, ITIL and security-risk-management practices

• IT asset, incident, problem, change and configuration management