Manager, Security Operations & Compliance 
(20946)

At Kerzner, we never settle. Through continued innovation, our team of pioneers push until the next level is achieved, and then to keep going. Our philosophy is simple - we go above and beyond to Blow Away our Guest and Colleagues. Good enough never is. For us, it is all about perfection and innovation. This is not simply our job, it’s our passion. 
 

Our Colleagues are at the heart of who we are and what we do. With an international team of over 10,000 Colleagues and strong strategic growth on the horizon, we offer unrivalled career opportunities around the world. We are committed to provide our Colleagues at all levels with opportunities to grow and develop within the organisation through personalised development plans and tailored succession planning. We invest in our communities to sustain the environment where we operate and minimising our own footprint. Whether it is through animal conservation, education or tree-planting, we like to give back in as many ways as we can to help our communities flourish.
 

Job Summary

The Security Operations & Compliance Manager is responsible for managing Kerzner’s Security Operations Centre (SOC), security monitoring, incident response, vulnerability oversight, and cybersecurity and IT compliance activities. The role ensures that cyber threats are effectively detected, investigated, contained, and remediate while maintaining compliance with applicable cybersecurity standards, regulatory requirements, corporate policies, and industry frameworks. The position acts as the operational bridge between security operations, risk & compliance, IT Infrastructure, Cloud, Applications, business stakeholders, and third-party security service providers. The ideal candidate will possess strong leadership skills, extensive knowledge of IT compliance frameworks, and the ability to drive a culture of compliance within the organization.

Key Responsibilities

• Very good understanding of leading cyber-security frameworks i.e. ISO’s, NIST, CIS, UAE IA
• Ensure timely renewal and issuance of PCI DSS certification for all Kerzner’s resorts
• Ensure data protection compliance and monthly reporting
• Maintain a near-accurate inventory (hardware, network components, virtual machines etc.) across all resorts
• Conduct monthly review of the inventory and capture new details
• Maintain a near-accurate enterprise app list, maintain SOC 2 for Saas
• Perform security review of new systems acquisitions / configuration of existing
• Conduct user access and admin access review twice a year, follow-up and close gaps
• Conduct monthly phishing campaigns, and report phishing data
• Maintain an IT risk registers in compliance with IA/ERM function
• Familiarity with brand protection tools like (iZoologic or similar), Coordinate with principal vendor, marketing and digital team to block / takedown fake services
• Ensure patch & backup compliance. Follow up and close gaps.
• Ensure 100% coverage of all security tools, no blind spots, follow up and close any gaps.
• Ensure all Quarterly, Bi-annual, Annual backup restoration testing and disaster recovery testing (reviews/testing's) are conducting on time
• Serve as a subject matter expert and advisor on IT compliance matters.
• Manage day-to-day SOC operations and security monitoring activities.
• Oversee cybersecurity incident detection, investigation, response, and escalation.
• Manage SIEM, EDR/XDR, threat monitoring, and SOC/MSSP performance.
• Oversee vulnerability management, penetration testing, and remediation tracking.
• Develop SOC, risk, vulnerability, audit, and compliance dashboards for management.
• Define and monitor SOC KPIs including MTTD, MTTR, incident volumes, and SLA performance.
• Conduct incident response tabletop exercises and security readiness assessments.
• Work closely with Infrastructure, Cloud, Network, Identity, Applications, Audit, Risk and business teams.
• Manage and develop SOC and Compliance team members and external security service providers.

Skills, Experience & Educational Requirements

• Bachelor’s degree / Diploma in information technology, Computer Science, or a related bachelor’s degree in information technology, Computer Science, or a related field.
• Proven experience (6 years) in IT incident, service, management, compliance preferably in the hospitality or related industry.
• In-depth knowledge of IT security operations, risk management, and compliance frameworks.
• Strong understanding of relevant regulations and standards (e.g., GDPR, PCI DSS, UAE IA, ISO).
• Excellent communication and interpersonal skills to effectively collaborate with cross-functional teams.
• Strong analytical and problem-solving abilities.
• Demonstrated ability to manage and lead compliance initiatives.
• I have read and understand the duties required of me and will adhere to and perform them as required.

Our company is expanding faster than ever before. We are investing in the growth of our company, and that means we are committed to investing in you. Join a team that is open-hearted, innovative, inclusive, and inspiring in spirit. We believe in making our guests happy beyond anything they have ever imagined. We wow them at every turn and create memories that will last a lifetime. You will be at the heart of this vision, to constantly innovate to deliver Amazing Experiences and Everlasting Memories.