Specialist Technology Regulations & Business Management (UAE National Role)

About the Role
Contribute to Group IT Risk and Cybersecurity at the company as a Specialist in Technology Regulations & Business Management. This role supports sound risk decisions, controlled exposures, and timely remediation through risk assessments, portfolio reviews, control actions, sound controls, and continuous improvement.

Key Responsibilities

• Proactively reach out to assist business and regulators in identifying opportunities and providing guidance from a security viewpoint, acting as the first contact to ensure security is perceived as an enabler.
• Align with business stakeholders on strategies to meet security challenges and promote security awareness & risk culture, creating a culture of business security champions, while ensuring early involvement of security in business projects to prevent unnecessary rework or delays.
• Track active risks via the IT Risk register, highlighting issues and business impacts to relevant stakeholders.
• Act as a consultative partner within the business unit to help improve security posture and adherence to security policies and expected controls.
• Educate and assist the business on data security controls in compliance with regulations where the company operates.
• AI Governance: Design and continuously improve the technology-risk elements of the Group AI governance framework, ensuring portfolio assessments and controls align with regulatory expectations and Group's Responsible AI principles.
• Regulatory Landscape & Horizon Scanning: Monitor and translate emerging regulations into actionable requirements for the business and Group IT.
• Regulatory Team Transformation: Drive the transformation of the regulatory function towards a data-driven, automated advisory model utilizing GRC platforms, analytics, and AI tools.
• Support the team with external and internal audit requirements related to technology, security, and data protection.
• Assess, track, and maintain regulatory compliance across local and international areas.
• Manage and implement regulatory security standards applicable to the company.
• Maintain a Group-wide regulatory register mapped to policies, controls, and control owners.
• Coordinate regulatory inspections, self-assessments, and attestations, tracking remediation to closure.
• Align the Group Information Security Strategy with the company's business strategy.
• Operationalize AI Governance, developing and maintaining policies and procedures aligned to relevant standards and regulations.
• Partner with stakeholders to ensure end-to-end AI lifecycle governance and monitoring, providing technology-risk input to the AI Governance Committee.
• Conduct regulatory gap and impact assessments, translating requirements into business and technical requirements.
• Brief senior management on regulatory changes and their business impact.
• Represent the Group in regulatory consultations and industry groups as appropriate.
• Transform the regulatory function through automation and analytics, implementing GRC platforms for improved operational efficiency.
• Develop key risk indicators (KRIs) and dashboards for regulatory and AI risk posture reporting.
• Coach team members on AI, regulatory, and digital skills.
• Govern and track the IT Risk register, ensuring risks, including those related to AI and emerging technologies, are addressed.
• Improve security and responsible AI awareness through training and awareness sessions.
• Build relationships with stakeholders to create a collaborative environment that balances security and functionality while meeting business demands.
• Communicate the implications of regulatory requirements effectively to stakeholders, ensuring understanding at both technical and business levels.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Engineering, Law, or Business; a Master’s degree in Business Management or Technology Management is preferred.
• Executive education in AI strategy, digital transformation, or risk management (e.g., Harvard, INSEAD).
• At least one of the following certifications: CISM, CISSP, CRISC, CGEIT.
• AI governance certification: IAPP AIGP, ISACA AAISM/AAIA, or ISO/IEC 42001 Lead Implementer/Auditor.
• ISO/IEC 27001 Lead Implementer/Auditor.
• Privacy certification (e.g., CIPP/E, CIPM, CDPSE).
• Cloud security certification (e.g., CCSK, CCSP) or PCI QSA / PCI DSS v4.0 knowledge.
• 5-8 years of experience in information security, technology risk, or technology regulatory compliance (minimum 3 years in the financial services industry).
• At least 2 years of hands-on experience in AI governance and risk management.
• Deep experience in implementing regulatory controls to ensure alignment of business and IT requirements.
• Understanding of the financial industry, market, and operations relevant to banking and finance.

Technical Knowledge

• In-depth knowledge of regulatory frameworks and embedding them into business requirements.
• Strong technical background covering various technologies and security domains (cloud, application, data, identity, network).
• Familiarity with development methodologies (Agile, DevSecOps) and market trends applicable to finance.
• Hands-on experience with GRC platforms and continuous control monitoring.

AI & Data Proficiency

• Understanding of AI/ML concepts, including risks and controls specific to AI, such as bias, explainability, and data privacy principles.
• Skills in data analytics and visualization tools (e.g., Power BI, Excel, SQL) and GenAI tools.

Managerial Skills

• Experience in change management and transformation, defining target operating models, and process re-engineering.
• Excellent communication and presentation skills to convey complex topics to senior management.
• Strong collaboration and stakeholder management skills, along with negotiations and vendor contract management expertise.