Information Security Governance Manager- Banking

About the Role
We are currently seeking an Information Security Manager for our UAE operations. This role requires a strong background in information security within the banking or financial sector, along with expertise in regulatory compliance and proactive management of security projects.

Responsibilities

• Provide strong Information Security experience within the banking/financial sector, ensuring exposure to various banking systems, regulatory requirements, and the management of concurrent activities.
• Maintain around 10-12 years of relevant Information/Cyber Security experience, demonstrating appropriate Manager-level responsibilities.
• Oversee Information Security Governance/GRC, covering policies, standards, risk assessments, risk registers, risk acceptance/exceptions, and compliance.
• Deliver hands-on experience with UAE IA/NESA, including implementation, assessments, and policy/control alignment.
• Manage PCI DSS, SWIFT CSP, VAPT, and other regulatory/security assessments effectively.
• Proven capability to manage audit/regulatory findings through remediation and validated closure.
• Act as the Information Security lead for major technology, digital, cloud, infrastructure, and application projects.
• Coordinate multiple security/regulatory projects simultaneously while effectively collaborating with IT, Business, Risk, Audit, Compliance, PMO, and external parties.

Requirements

• Education: Bachelor’s degree.
• Professional/Technical Qualifications: CISM/CRISC, CISA/CISSP certification.
• Experience: 10-12 years in a related industry, particularly within information security.
• Skills:
  • In-depth knowledge of information security and technology infrastructure.
  • Extensive experience in implementing NESA requirements and developing security policies in line with them.
  • Creative thinking with the ability to consider alternatives and develop conceptual frameworks for problem-solving.
  • Excellent communication skills, capable of conveying information to senior nontechnical users without using technical jargon.
  • Adaptability to a fast-paced IT landscape with current knowledge of new security technologies.
  • Strong multi-tasking ability to manage several concurrent projects and prioritize demands.

Terms and Conditions

• Joining time frame: 30 Days.