Security Delivery Manager

One Dubai-based contract seat with our external partner: a large retail group headquartered in Dubai with a workforce of more than 16,000 people. You will run the day-to-day delivery of the security workstream inside its enterprise transformation programme, keeping every security commitment visible, owned and moving to closure.ABOUT THE CLIENTOur partner is one of the largest luxury and premium retail groups in the Middle East. Headquartered in Dubai, it employs more than 16,000 people across the region and runs several hundred stores, dozens of e-commerce sites and apps, and a portfolio of over 300 international brands. It is part-way through a multi-year technology transformation: a new SAP core across finance, people and logistics, and the omnichannel retail estate around it, delivered with a global system integrator. Group Information Security runs a dedicated security workstream inside that programme: remediation of agreed security priorities, hypercare on the releases already live, and security readiness for the next major release. This seat leads that workstream's delivery. We share the client's name with shortlisted candidates.ABOUT THE ROLEDreamcast Interactive is a Dubai-headquartered studio building AI systems, web and mobile products, immersive AR/VR and full-cycle games for clients across the US, UK and GCC. We are placing a Security Delivery Manager with the client above on a [12-month] full-time contract, engaged through Dreamcast and based at the client's Dubai head office with hybrid flexibility. This is client work, not an internal role.You report to the Director of Information Security and line-manage the Security Business Analyst, working closely with the Security Assurance Specialist. You lead and coordinate delivery; implementing each remediation action stays with its named owner. Your job is to make sure every action has an owner, a date, a dependency map and evidence, and that nothing slips quietly.WHAT YOU WILL OWN- Day-to-day delivery management of the security workstream across remediation, hypercare and the next release- The integrated security delivery plan: risks, remediation actions, owners, milestones, dependencies and evidence status, kept current and kept honest- Progress against agreed security priorities and committed treatment dates, with constraints surfaced early and escalated to the right forum- Coordination across Group Information Security, the transformation programme, the global system integrator, the ERP vendor and business stakeholders- Workstream planning, RAID and dependency management, and consolidated reporting for the Director of Information Security and governance forums- Change control on commitments: material changes to security scope, dates or treatment plans identified and taken through governance rather than absorbed- The evidence pipeline: remediation evidence from action owners routed into Group Information Security assurance, and assurance findings routed back to the delivery owner who has to act on them- Traceability, with the Business Analyst and the Assurance Specialist, from each risk to its controls, remediation actions and evidence- Security planning for the next major release, so requirements are in place before design and build and dependencies hold through design, build, testing and deployment- Transition of completed security capabilities and any open actions into accountable business-as-usual ownership- Line management of the Security Business Analyst, and support to the Director in preparing executive governance reportingWHAT YOU BRING- Substantial experience managing delivery of security, technology-risk or compliance workstreams inside large, multi-party programmes- Planning discipline that holds under pressure: integrated plans at action level, RAID and dependency management, evidence tracking, honest status- Enough working knowledge of information security controls, technology risk and remediation practice to challenge action owners and read their evidence- A track record of coordinating a global system integrator and software vendors and holding them to committed dates- Reporting at Director and governance-forum level: concise, accurate, clear about what is at risk and what decision is needed- Experience leading or line-managing analysts- Clear written and spoken English with technical and non-technical stakeholdersNICE TO HAVE- Security workstreams within SAP or other large ERP transformation programmes- Familiarity with ISO/IEC 27001 and NIST CSF- PMP, PRINCE2 or MSP- Previous work in the Middle EastCONTRACT- 12-month full-time contract through Dreamcast Interactive, starting as soon as possible, with extension based on performance- Based in Dubai at the client's head office, with hybrid flexibility- Open only to candidates already based in the UAE- Competitive monthly rate, benchmarked to the profilePrefer email? hello@dreamcastinteractive.com with the subject "Security Delivery Manager – Your Name".