Cyber Security Senior Director - UAEN
At Miral, we create world-class destinations and immersive experiences that inspire millions of guests every year. As we continue to expand our digital capabilities and technology landscape, cybersecurity remains at the heart of delivering safe, resilient, and seamless experiences. We are seeking an exceptional Cybersecurity Operations Senior Director to lead our technical security operations function and play a critical role in protecting a complex, large-scale enterprise environment. About the Role Reporting to the Vice President of Digital & Technology, this strategic leadership role is responsible for driving the design, implementation, and operation of Miral's cybersecurity controls across infrastructure, networks, applications, endpoints, privileged access, and security operations. You will lead a multidisciplinary team spanning Security Operations (SOC), Network Security, Identity & Access Management, and Cyber Incident Response, ensuring the organization remains resilient against evolving cyber threats while supporting business growth and innovation. This is a unique opportunity to shape the future of cybersecurity within one of the UAE's most dynamic organizations, where technology, innovation, and guest experience come together at scale. What You'll Be Leading - Strategy, Operating Model & Governance Interface Translate Miral’s security strategy into an actionable technical security operations roadmap aligned to NIST CSF 2.0, ISO 27001, the UAE Information Assurance Standards and ADHICS. Implement and operate the security policies, standards and controls defined by the independent Information Security Governance (second-line) function, maintaining clear segregation of duties between security operations and security governance. Act as the first-line technical authority on cyber risk, providing assurance to the VP Digital & Technology and the governance function on the design and effectiveness of security controls. - Network & Infrastructure Security Own the design, deployment and day-to-day operation of all network and infrastructure security controls — firewalls, switches and cores, segmentation, NAC, VPN and secure remote access, IDS/IPS, web and email gateways, and DDoS protection. Led the network security team transitioned from IT Infrastructure & Operations, enforcing secure-by-design network architecture and zero-trust principles. Ensure security hardening, baseline configuration and continuous compliance across servers, endpoints, cloud and OT/IoT environments supporting Miral’s destinations. - Security Operations & Threat Management (SOC) Direct 24x7 security monitoring, threat detection and triage through the Security Operations Centre, leveraging SIEM, EDR/XDR, SOAR and threat intelligence. Oversee detection engineering, use-case development and continuous tuning to reduce false positives and improve mean-time-to-detect and mean-time-to-respond. Lead proactive threat hunting and adversary emulation to validate the resilience of Miral’s technology estate. - Identity, Privileged Access & Application Security Operate and continuously improve Privileged Access Management (PAM), identity and access controls, and joiner-mover-leaver enforcement in partnership with IT. Embed application security across the SDLC — secure code review, SAST/DAST, API security and DevSecOps practices. - Vulnerability, Patch & Configuration Management Run the enterprise vulnerability management lifecycle — discovery, prioritisation, remediation tracking and reporting — across infrastructure, applications and endpoints. Coordinate patch and configuration management with IT operations to close exposures within agreed SLAs. - Incident Response & Cyber Resilience Own the technical cyber incident response capability — preparation, detection, containment, eradication, recovery and post-incident review. Maintain and regularly test incident response playbooks, conduct tabletop exercises, and en