Director of CyberSecurity & GRC

Company Description

CyberA Solutions is a UAE-based Managed Consultation and Services Provider (MCSP) specializing in delivering world-class cybersecurity solutions to mid-market organizations. Focused on industries like finance, insurance, and healthcare, CyberA bridges the gap by combining enterprise-level security consulting with a managed services model tailored to mid-market challenges. Guided by our 4A Framework—Alignment, Assurance, Armor, and Awareness—we offer a unified security operating model to enhance clients’ defenses. Our services include compliance management, security maturity assessments, SOC services, security awareness training, and delivery of advanced protective technologies. Headquartered in the UAE, we are dedicated to simplifying enterprise-level security for mid-market businesses.

Role Overview

We are looking for a Director of Cybersecurity & GRC to help design and lead CyberA’s cybersecurity portfolio, services, and delivery capability. The role will own the build-out of our MCSP offerings (SOC, GRC, offensive security, advisory) and manage a multi-disciplinary cybersecurity team, working closely with the CISO and CEO on strategy, go-to-market, and execution.

This is a hands-on leadership role for someone who can move seamlessly between client-facing advisory, internal service design, technical governance of SOC/GRC, and scaling a high-performance team within a fast-growing startup.

Key Responsibilities

• Define and continuously evolve Cybera’s cybersecurity service catalogue across GRC, SOC-as-a-Service, managed detection, offensive security, and vCISO/advisory offerings.
• Lead design and implementation of cybersecurity frameworks and programmes for clients, including ISO 27001/27017 ISMS, PCI DSS, NIST CSF, NIST SP 800-171, NCA CST, SAMA, PDPL, and other regional regulations as relevant.
• Architect and govern SOC service offerings (IT and OT where applicable), including SIEM/SOAR strategy, control mapping to MITRE ATT&CK, and KPI/KRI definitions for SOC performance.
• Collaborate with product/engineering to shape CyberA’s platform roadmap (GRC modules, dashboards, automation, reporting) based on client requirements and regulatory trends.
• Manage and mentor a team of cybersecurity professionals (GRC consultants, SOC engineers/analysts, penetration testers, security architects), establishing clear role definitions, training plans, and progression paths.
• Own quality and consistency of client deliverables: policies and standards, risk registers, treatment plans, audit reports, playbooks, runbooks, and executive presentations.
• Lead or support presales activities: discovery workshops, gap assessments, solution design, proposals, PoCs, and executive briefings with CxO stakeholders.
• Act as senior advisor to C-level executives and boards on cyber risk, security architecture, and regulatory compliance for key accounts.
• Establish and monitor practice-level KPIs and OKRs (utilisation, NPS, renewal/upsell rates, time-to-value) and report regularly to the CISO and CEO.
• Contribute to thought leadership and capability building: internal playbooks, knowledge-sharing, training programmes, and possibly a Cybera Academy-style enablement function for clients and partners.

Required Experience

• 10+ years in cybersecurity, with at least 3–5 years in a leadership role (practice lead, head of cybersecurity, director, senior manager) covering multiple domains (GRC, SOC, offensive security, architecture).
• Demonstrable experience in building or significantly scaling a cybersecurity practice or MSSP function (e.g., service catalogue design, methodology, delivery governance, KPIs).
• Hands-on experience implementing and maintaining at least three of: ISO 27001/27017, PCI DSS, NIST CSF, NIST SP 800-171, NCA CST, SAMA, PDPL, or equivalent regional frameworks.
• Proven background in SOC design and governance, SIEM/SOAR projects (QRadar, Splunk, ELK, Resilient, TheHive, etc.), and mapping use cases/controls to MITRE ATT&CK.
• Strong experience in client-facing consulting roles with financial services, telecom, government, or critical infrastructure clients.
• Track record of leading and developing technical teams, including hiring, performance management, and competency development.
• Excellent written and spoken English; strong executive communication and presentation skills.

Nice-to-have Experience

• Prior experience in a GCC-based MSSP or cybersecurity consulting firm…