Asst Manager, Cyber Org Alignment and Compliance (UAE National ONLY)

Role Overview

Assistant Manager, Cyber Organization Alignment and Compliance at Mashreq, UAE. This position is open to UAE Nationals only.

Role Purpose

Drive Information Security Governance, Risk, and Compliance (GRC) initiatives to align the bank's information security practices with overall risk management strategy, compliance requirements, and governance frameworks. Strengthen the bank's security posture through effective processes including risk tracking, compliance monitoring, risk and control self-assessments, exception evaluation, and accurate reporting.

Key Responsibilities

Governance & Compliance

• Ensure compliance with policies, regulatory requirements, and industry standards.
• Ensure adherence to internal and external compliance requirements.
• Ensure the right level of governance and compliance are in place across the organization.
• Foster a culture of security awareness and compliance within the organization.

Risk Management

• Identify, assess, and manage information security risks with the business.
• Perform risk trend analysis and reporting.
• Drive risk assessments for proposed policy exceptions to evaluate their potential impact on compliance and security.
• Ensure that information security risks are effectively managed and mitigated.

Policy Exception Management

• Develop and maintain a comprehensive process for managing policy exceptions, including documentation, expiration date and approval workflows.
• Ensure all policy exceptions are properly documented, reviewed, and approved in accordance with organizational standards.
• Work with stakeholders to communicate the policy exception process, develop compensating controls for policy exceptions, and ensure timely closure.
• Regularly review and monitor granted exceptions to ensure compliance with the terms and conditions.
• Conduct periodic review of approved exceptions and identify gaps for improvements.

Service Catalog & Performance

• Develop and maintain a comprehensive service catalog that accurately reflects the services offered by Information Security Governance (ISG).
• Regularly review and update the service catalog to ensure it aligns with business needs and technological advancements.
• Monitor the performance of ISG services to ensure they meet established service level agreements (SLAs) and key performance indicators (KPIs).

Continuous Improvement

• Drive continuous improvement in risk management processes.
• Continuously improve the information security posture of the organization.

Qualifications & Experience

• Minimum 6–8 years of total professional experience, including 4–6 years of dedicated Information Security GRC experience.
• Familiarity with information security technologies, risk, threat and vulnerability assessments, and security measures.
• Experience with governance, risk management, and compliance frameworks (ISO 27001, NIST, GDPR, PDPL).
• Professional certifications such as CISA, CISM, CISSP, or CRISC.

Skills & Competencies

• Strong communication and interpersonal skills.
• Ability to manage multiple projects and priorities.
• Proficiency in security tools and technologies.
• Strategic insight in aligning security with business objectives.