Senior Lead, Technology & Cyber Security Risk Oversight

The Senior Lead, Technology & Cyber Security Risk Oversight will play a pivotal role in supporting the implementation of the Emirates NBD Operational Risk management framework. This position focuses on technology and information security risk oversight to enable the execution of the enterprise risk management strategy. Key responsibilities include conducting risk assessments, collaborating with stakeholders to manage risk reduction efforts, and providing expert advice to senior management.

Key Responsibilities:

• Lead the development and implementation of risk management tools and monitor Key Risk Indicators (KRIs).
• Conduct risk and control self-assessments (RCSA) and support materiality assessments for technology initiatives.
• Oversee the technology risk assessment and governance frameworks, aligning them with Basel III.
• Manage and respond to cyber incidents, technology disruptions, and control failures.
• Maintain the Technology Risk register and prepare regulatory filings ensuring compliance with security frameworks.
• Promote risk awareness through training and communication with teams across the organization.

Education and Experience:

• Bachelor’s degree in Cybersecurity, IT, or a related field (or equivalent experience).
• Minimum of 7 years in Cybersecurity and Risk Management with at least 10 years of relevant experience in the field.
• Technical security certifications such as OSCP, GCTI, AZ500, CISSP, CISM, CRISC are preferred.

Skills and Requirements:

• Expertise in Cybersecurity and IT Risk Management with hands-on experience in developing risk oversight frameworks.
• Proficient in evaluating and managing cyber threats, incident response, and security architecture reviews.
• Strong analytical and problem-solving skills, with the ability to communicate complex risks effectively to both technical and non-technical stakeholders.
• Fluent in English.

This role is crucial for ensuring robust oversight of technology risks and enhancing the organization's overall resilience against cyber threats.