Manager Information Security

We are looking for an experienced Information Security professional to lead security governance and regulatory compliance for the Bank’s international operations, with a primary focus on the UAE. This role acts as the key liaison between the Head Office and overseas locations, ensuring that corporate security standards are consistently applied while meeting all relevant regulatory and cybersecurity requirements. The successful candidate will oversee the coordination of security initiatives across multiple countries, working closely with various stakeholders to maintain a strong security posture and regulatory compliance.

Key Responsibilities

- Lead the coordination and oversight of Information Security and Cybersecurity requirements across international locations.
- Ensure adherence to Head Office Information Security policies, standards, frameworks, and control requirements.
- Serve as the primary Information Security contact for overseas regulatory matters, including direct engagement with the Central Bank of the UAE (CBUAE).
- Manage regulatory inspections, assessments, reviews, submissions, and remediation activities effectively.
- Oversee Information Security risk assessments, evaluate control effectiveness, and drive remediation of security findings.
- Coordinate response efforts for cybersecurity incidents impacting international operations, ensuring timely escalation and reporting.
- Support compliance with data protection and privacy laws across various international jurisdictions.
- Facilitate Information Security activities related to internal and external audits, regulatory inspections, and independent assessments.
- Provide consolidated reporting to senior management on cybersecurity risks, regulatory compliance status, security incidents, vulnerabilities, and remediation progress.
- Build and maintain strong partnerships with Country Management, Compliance, Risk, Audit, IT, and Operations teams across the Bank’s international network.

Required Qualifications

- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
- At least 8 years of professional experience in Information Security, Cybersecurity, Technology Risk, Security Governance, or Regulatory Compliance.
- Proven track record within the Banking or Financial Services sector.
- Experience managing Information Security and regulatory requirements across multiple countries or international operations.
- Strong background in regulatory inspections, cybersecurity assessments, audits, and remediation programs.
- Hands-on experience with international central bank Information Security and Cybersecurity regulatory requirements, specifically those of the Central Bank of the UAE (CBUAE) and the Central Bank of Bahrain (CBB). This includes implementation, compliance assessments, regulatory examinations, and remediation efforts.
- UAE/GCC banking and regulatory experience is highly desirable.

Preferred Qualifications and Certifications

Candidates must hold at least two relevant professional certifications, including one or more of the following:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- CRISC (Certified in Risk and Information Systems Control)

Additional certifications such as ISO/IEC 27001 Lead Implementer or Auditor, CCSP (Certified Cloud Security Professional), CDPSE (Certified Data Privacy Solutions Engineer), or other industry-recognized qualifications will be considered an advantage.

Core Competencies

- Information Security Governance
- Cybersecurity and Technology Risk Management
- Regulatory Compliance
- Data Protection and Privacy
- Stakeholder and Regulatory Engagement
- Risk Assessment and Remediation
- Executive Reporting and Communication
- Strong Analytical and Problem-Solving Skills

This role offers the opportunity to play a pivotal part in safeguarding the Bank’s international operations while ensuring compliance with complex regulatory environments. The ideal candidate will be proactive, detail-oriented, and skilled at navigating cross-border security challenges.