Manager Information Security

We are looking for an experienced Information Security professional to lead security governance and regulatory compliance for the Bank’s international operations, with a primary focus on the UAE. This role acts as the central liaison between the Head Office and overseas locations, ensuring that corporate security standards are consistently applied while meeting all relevant regulatory and cybersecurity requirements. The successful candidate will play a critical role in managing information security risks, coordinating regulatory engagements, and supporting compliance efforts across multiple jurisdictions.

Key Responsibilities

- Lead coordination and oversight of Information Security and Cybersecurity requirements across the Bank’s international locations.
- Ensure adherence to Head Office Information Security policies, standards, frameworks, and control requirements.
- Serve as the primary Information Security contact for overseas regulatory matters, including direct engagement with the Central Bank of the UAE (CBUAE).
- Manage regulatory inspections, assessments, reviews, submissions, and remediation activities effectively.
- Oversee Information Security risk assessments, control effectiveness reviews, and remediation of identified security issues.
- Coordinate response efforts for cybersecurity incidents impacting international operations, ensuring timely escalation and reporting.
- Support compliance with data protection and privacy regulations across various international jurisdictions.
- Facilitate Information Security activities related to internal and external audits, regulatory inspections, and independent assessments.
- Provide consolidated reporting to senior management on cybersecurity risks, regulatory compliance status, security incidents, vulnerabilities, and remediation progress.
- Build and maintain strong partnerships with Country Management, Compliance, Risk, Audit, IT, and Operations teams across the Bank’s global network.

Required Qualifications

- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
- At least 8 years of professional experience in Information Security, Cybersecurity, Technology Risk, Security Governance, or Regulatory Compliance.
- Proven track record within the Banking or Financial Services sector.
- Demonstrated experience managing Information Security and regulatory requirements across multiple countries or international operations.
- Strong background in regulatory inspections, cybersecurity assessments, audits, and remediation programs.
- Hands-on experience with international central bank Information Security and Cybersecurity regulatory requirements, specifically those of the Central Bank of the UAE (CBUAE) and the Central Bank of Bahrain (CBB), including implementation, compliance assessments, regulatory examinations, and remediation efforts.
- UAE/GCC banking and regulatory experience is highly desirable.

Preferred Qualifications and Benefits

Candidates should hold a minimum of two relevant professional certifications, including at least one from the following: CISSP, CISM, CISA, or CRISC. Additional certifications such as ISO/IEC 27001 Lead Implementer/Auditor, CCSP, CDPSE, or other industry-recognized qualifications will be considered advantageous.

Core Competencies

- Information Security Governance
- Cybersecurity and Technology Risk Management
- Regulatory Compliance
- Data Protection and Privacy
- Stakeholder and Regulatory Engagement
- Risk Assessment and Remediation
- Executive Reporting and Communication
- Strong Analytical and Problem-Solving Skills

This role offers the opportunity to work at the forefront of international banking security, engaging with regulatory bodies and cross-functional teams to uphold the highest standards of cybersecurity and compliance.