Cybersecurity & Access Management – Senior Specialist

Lead the design, implementation, and continuous strengthening of cybersecurity posture, access governance, and data protection
controls to ensure secure, compliant, and resilient digital operations across systems, platforms, and data environments.
Act as the technical guardian of sensitive organizational data, including beneficiary information, partner records, financial data, and internal
operational information, ensuring protection aligned with UAE regulations, institutional policies, and international best practices.

Key Responsibilities
• Design, implement, and manage cybersecurity framework across cloud platforms, enterprise systems, and data environments.
• Establish and maintain access governance policies, identity management standards, and role-based access controls across CRM, ERP, and data platforms.
• Continuously monitor and improve the security posture of digital ecosystem, including infrastructure, integrations, and user access patterns.
• Support secure onboarding of new systems, platforms, and integrations by embedding security principles into implementation processes.
• Lead cybersecurity risk assessments and vulnerability mitigation initiatives.
Governance Responsibilities
• Define and enforce cybersecurity governance standards across AGF’s digital ecosystem.
• Establish access governance frameworks, including identity lifecycle management and least-privilege principles.
• Contribute to enterprise governance decisions related to data protection, system access, and secure architecture.
• Support policy development related to information security, data protection, and secure systems usage.
Compliance Responsibilities
• Serve as the technical lead for data protection compliance, including PDP-aligned security practices and access controls.
• Ensure that systems handling beneficiary, partner, grants, and financial data are protected in accordance with regulatory expectations.
• Support audit readiness by ensuring access logs, security controls, and protection measures are properly implemented and documented.
• Collaborate with Legal, Grants & Awards to align cybersecurity practices with data protection obligations and institutional policies.
• Ensure identity and access practices support compliance with financial and operational controls, including traceability and segregation of duties.
Data Accountability
• Ensure protection of sensitive data through encryption, access control, and monitoring mechanisms.
• Support data classification and protection standards across beneficiary, partner, grants, and operational data.
• Work closely with Data Engineer and Architecture teams to secure data pipelines, storage environments, and integrations.
• Contribute to preventing unauthorized access, data leakage, or misuse of sensitive information.
Systems Accountability
• Ensure secure configuration and access governance across core platforms including Microsoft Dynamics (CRM & FinOps), Azure environments, analytics platforms, and integration layers.
• Oversee identity and access management across enterprise systems, including user provisioning, role assignment, and access reviews.
• Collaborate with IT Infrastructure to ensure secure hosting environments, endpoint security, and network protection.
• Support secure implementation of new systems and integrations from a cybersecurity perspective.

Skills:-

Bachelor’s degree in cybersecurity, information security, access governance, or IT security architecture roles.

8 years experience in cybersecurity, information security, access governance, or IT security architecture roles.

Strong expertise in cybersecurity frameworks and standards (ISO 27001, NIST, CIS Controls, or equivalent).
• Hands-on experience with identity and access management systems (Azure Active Directory, role-based access control models).
• Experience securing cloud environments (Microsoft Azure security tools, security center, identity protection).
• Knowledge of data protection technologies including encryption, secure data storage, and access monitoring.
• Experience with security monitoring tools, vulnerability management, and risk assessment methodologies.
• Understanding of secure architecture principles for CRM, ERP, and data platforms.
• Familiarity with API security, authentication protocols, and integration security controls.