Job Description

Job Information

Industry
Cyber Security & IT

City
Dubai

Country
United Arab Emirates


Job Description
You will lead the development and implementation of a comprehensive IAM strategy that adheres to the zero-trust principle and incorporates systematic account auditing. As Deriv has grown to a global company with 20 offices and over 1,200 employees, the importance of implementing strong access control measures to safeguard our data and ensure regulatory compliance cannot be overstated. You will oversee the access control of over 200 internal and external systems and applications, which continue to grow in number. Your technical expertise will be essential in navigating an increasingly complex digital environment. Your strong understanding of industry trends and best practices in IAM will enable you to continuously improve our IAM capabilities and protect us from evolving threats.

Your challenges

Develop and implement a comprehensive IAM strategy that ensures the confidentiality, integrity, and availability of Deriv's information assets.
Establish policies, procedures, and standards for IAM that are aligned with industry best practices and regulatory requirements.
Oversee the design, implementation, and maintenance of IAM systems, including identity management, access control, and authentication technologies.
Ensure that access controls are applied to all internal and external systems and applications and that these controls are regularly reviewed and audited.
Build, mentor, and lead a team of IAM professionals.
Provide guidance and expertise on IAM-related matters to technical and non-technical stakeholders across the organisation.
Work closely with other leaders to identify and mitigate IAM-related risks, including those related to data breaches, insider threats, and regulatory compliance.


Requirements

15+ years of work experience in IT security or IT administration in a mid-to-large-sized company, including 5+ years of management experience
Strong knowledge and expertise in access control
Solid technical knowledge of security applications
Expert-level knowledge of professional standards in security administration and best practices
Strong understanding of regulatory compliance requirements related to IAM, such as GDPR
Great attention to detail
Outstanding organisational skills
Excellent spoken and written English communication skills
University degree in a related field

What’s good to have

Professional certifications in IAM, such as CISSP, CISM, or CRISC
Work experience in the fintech industry


Benefits

Exciting work challenges
Inspiring work environment and creative freedom
Individualized career path
Competitive salary, annual performance bonus, and health benefits
A secure position with a long-term career perspective in an internationally expanding environment
Casual dress code
Work permit
Medical insurance
Travel and internet allowances

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0004   Knowledge of cybersecurity and privacy principles.
• K0033   Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).
• K0043   Knowledge of industry-standard and organizationally accepted analysis principles and methods.
• K0167   Knowledge of system administration, network, and operating system hardening techniques.

Required Skills

• S0018   Skill in creating policies that reflect system security objectives.
• S0027   Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• S0138   Skill in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications (e.g., S/MIME email, SSL traffic).

Required Abilities