Cyber Security Governance & Advisory Opportunities

Provide leadership and specialist advice on cybersecurity governance across a regulated banking environment. The role focuses on building and maintaining security frameworks, policies and standards, assessing cyber risk and supporting compliance with relevant UAE requirements. The successful candidate will work with technology, risk, compliance, audit and business stakeholders to strengthen controls, improve readiness and provide clear management reporting. The position requires a mature understanding of information security governance as well as the ability to translate regulatory and technical expectations into practical operating processes.

Key Responsibilities

• Lead the development, review and implementation of cybersecurity governance frameworks, policies, standards and control requirements.
• Assess information security risks and coordinate mitigation plans with the teams responsible for technology and business services.
• Support compliance with relevant UAE regulatory requirements and applicable banking security expectations.
• Oversee governance aspects of incident and crisis response planning, including readiness, escalation and lessons learned.
• Monitor security performance, control effectiveness and remediation activity through defined measures and reporting.
• Coordinate cybersecurity audits, assessments and regulatory reviews, ensuring evidence is complete and actions are addressed.
• Prepare clear reports and recommendations for senior management and relevant governance committees.
• Maintain awareness of new cyber threats, technologies and regulatory developments and advise stakeholders on their impact.

Requirements and Experience

• At least eight years of experience in cybersecurity governance, preferably in banking or another regulated environment.
• Strong knowledge of ISO 27001, NIST Cybersecurity Framework and UAE information assurance requirements.
• Knowledge of UAE Central Bank requirements, including relevant banking rulebooks and Open Finance requirements, is important.
• Experience developing security policies, assessing risk, supporting audits and reporting to senior stakeholders is required.

Qualifications

• A bachelor’s degree in Information Technology, Computer Science or a related discipline is required.
• CISSP and CISM are required, together with at least one of ISO 27001:2022 Lead Implementer or ISO 27001:2022 Lead Auditor.

Skills and Competencies

• Cybersecurity governance and control frameworks.
• Risk assessment, regulatory compliance and audit management.
• Incident response governance and performance monitoring.
• Strategic planning, analytical thinking and executive communication.