Chief Technology Officer

Role SummaryThe Chief Technology Officer (CTO) is a strategic executive responsible for driving Legend Holding Group’s technology vision, digital transformation, and enterprise-wide technology enablement. Reporting directly to the Group CEO / Board, the CTO will lead the Group’s technology roadmap, platform development, cybersecurity posture, and data-driven innovation to enhance efficiency, scalability, and customer experience across all business units. The role demands a future-oriented, hands-on leader capable of architecting and delivering enterprise systems, digital platforms, and emerging technology initiatives at scale while building a high-performance, security-first technology organization.About Legend HoldingLegend Holding Group is a diversified enterprise headquartered in Dubai, operating across the Middle east and African region. With a strong focus on sustainability and innovation, the group manages a growing portfolio of companies in automotive, trading, energy, Travel and Tourism and mobility services.Rooted in Loyalty, Excellence, and Progress, we lead innovation and technology to seamlessly connect the physical and digital worlds.Our goal is to become a leader in intelligent, data-driven solutions because Together We Grow.Key Responsibilities1. Technology Strategy, Innovation & Digital LeadershipDefine and execute group-wide technology strategy aligned with business goals.Establish a future-ready ecosystem (ERP, CRM, AI, Cloud, Apps).Advise on emerging technologies.Build a strong tech leadership pipeline.2. Enterprise Systems, Applications, ERP & Digital Platforms DeliveryLead ERP, CRM, and enterprise tech rollouts across all business units.Own the Group's application development function — lead design, build, and maintenance of custom business applications, internal tools, and enterprise workflows.Oversee development of consumer-facing apps (customer, dealer, service) and BU-specific digital platforms.Develop and maintain internal employee portals (self-service HR, procurement, service requests, knowledge base) to streamline cross-functional operations.Deploy and manage self-service kiosks for customer and employee support (e.g., service center check-in, showroom info kiosks, HR/IT helpdesk kiosks) to improve turnaround time and reduce manual handling.Esure seamless integration across ERP, CRM, portals, apps, and kiosks, with a unified data and identity layer.Establish application lifecycle governance — version control, QA/testing standards, release management, and post-deployment support SLAs.3. Technology Infrastructure, Architecture & IT OperationsEnsure secure, stable, scalable IT infrastructure.Standardize systems architecture.Optimize IT operations and vendor governance.4. Cybersecurity, Data Protection & ComplianceOwn and lead the Group's end-to-end cybersecurity strategy, setting the risk appetite, security roadmap, and investment priorities in alignment with business and Board expectations.Establish an enterprise cyber risk management framework, including regular risk assessments, threat modelling, and vulnerability/penetration testing across all business units.Design and implement a defense-in-depth security architecture, including network security, endpoint protection, identity & access management (IAM), and progressive adoption of zero-trust principles.Build and lead a 24/7 security monitoring capability (SOC/SIEM) with defined incident detection, escalation, and response protocols.Own the cyber incident response and crisis management plan, including post-incident review and continuous improvement.Implement and test robust Disaster Recovery (DR) and Business Continuity (BCP) plans across critical systems and data.Ensure full compliance with UAE data protection and cybersecurity requirements — including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) — as well as relevant international standards and frameworks (e.g., ISO 27001, NIST CSF).Enforce third-party and vendor risk management, ensuring all partners, cloud providers, and integrations meet Group security and data-handling standards.Champion a group-wide security-first culture through mandatory security awareness training, phishing simulations, and clear accountability at every level.Report regularly to the CEO, Board, and Audit Committee on the Group's cyber risk posture, incidents, and maturity progress.5. Data, Analytics & AutomationEstablish data strategy & governance.Drive automation, AI, analytics initiatives.Build predictive insight dashboards.6. Financial Management & Technology ROIManage budgets & tech investments.Track ROI on initiatives.Drive cost-efficient modernization.7. Leadership, Culture & CollaborationImprove collaboration across units.Build/mentor tech teams.Promote innovation culture.Who Fits the Legend SeatEducationBachelor's in Computer Science, IT, Engineering.Master's preferred.Experience12–15+ years in tech leadership.5+ years in senior/executive roles.Strong ERP, CRM, cloud, architecture experience.Proven track record building and leading enterprise-grade cybersecurity and risk management programs.Experience leading in-house or outsourced application development teams (web, mobile, low-code/no-code platforms).Exposure to automotive/mobility preferred.SkillsStrategic & hands-on technology leadership.Deep expertise in platforms, cloud, and analytics.Strong cybersecurity leadership — risk management, security architecture, incident response, and regulatory compliance.Familiarity with self-service technology deployment (kiosks, portals) in customer-facing or high-volume operational environments.Strong project delivery & stakeholder management.Balances innovation with operational excellence.Key Performance Indicators (KPIs)KPI Measurement Roadmap Delivery & Innovation IndexMilestone Achievement / Innovation ScoreTech Adoption & BU SatisfactionAdoption % / Stakeholder Satisfaction ScoreERP & Platform Go-Live RateGo-Live Rate vs PlanSystem UptimeUptime PercentageIntegration AccuracyIntegration Accuracy RateApp/Portal/Kiosk AdoptionUsage Rate Within 3 MonthsApp Development Cycle TimeAverage Delivery Cycle TimeKiosk Uptime & Transaction VolumeKiosk Availability & Transactions ProcessedIT SLA PerformanceSLA Compliance RateIT Cost OptimizationCost Savings PercentageScalability ScoreInfrastructure Scalability RatingCyber Incident RateIncidents per QuarterMean Time to Detect/Respond (MTTD/MTTR)Average Detection & Response TimeAudit & Compliance ScoreCompliance Audit RatingDR Recovery Time (RTO/RPO)Recovery Time / Recovery Point ObjectivesSecurity Maturity IndexMaturity Assessment ScoreSecurity Training Completion% Staff Completing TrainingAutomation ROI & Data AccuracyReturn on Automation Investment / Data Quality RateAnalytics Adoption & Decision Cycle TimeAnalytics Usage Rate / Time to DecisionBudget DeliveryVariance vs Approved Budget (±5%)Technology ROI & Annual Cost SavingsReturn on Investment / Cost Savings AchievedEngagement Score & Attrition ReductionEmployee Engagement Score / Retention RateLeadership MilestonesLeadership Development Progress