Information Security - Manager - NESA- Banking

Role Overview

Information Security Manager for VAM Systems' UAE operations in the banking sector.

Role Purpose

Lead information security governance, compliance, and risk management across banking operations, ensuring adherence to NESA requirements and regulatory standards while managing concurrent security and technology projects.

Key Responsibilities

Information Security Governance & Risk Management

• Develop information security policies aligned with NESA requirements.
• Establish and maintain information security governance and GRC frameworks covering policies, standards, risk assessments, risk registers, and risk acceptance/exceptions.
• Manage audit and regulatory findings through remediation and validated closure.
• Conduct risk assessments and maintain compliance documentation.

Regulatory Compliance & Assessments

• Implement and assess UAE IA/NESA requirements.
• Ensure policy and control alignment with NESA standards.
• Manage PCI DSS, SWIFT CSP, VAPT and regulatory security assessments.
• Lead compliance activities across banking systems and regulatory requirements.

Project & Stakeholder Leadership

• Act as Information Security lead for major technology, digital, cloud, infrastructure and application projects.
• Manage multiple concurrent security and regulatory projects simultaneously.
• Coordinate effectively with IT, Business, Risk, Audit, Compliance, PMO and external parties.
• Communicate with senior non-technical users without using technical language.

Strategic Planning & Technology

• Maintain in-depth knowledge of information security and technology infrastructure.
• Adapt to fast-moving IT landscape and keep pace with latest security technologies and thinking.
• Apply creative thinking to develop conceptual frameworks and alternative solutions.

Qualifications & Experience

• Bachelor's degree.
• 10–12 years of relevant Information or Cyber Security experience with Manager-level responsibilities.
• Strong banking and financial sector information security experience, including exposure to various banking systems and regulatory requirements.
• Hands-on experience with UAE IA/NESA implementation, assessments and policy/control alignment.
• Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory assessments.

Skills & Competencies

• In-depth knowledge and understanding of information security and technology infrastructure.
• In-depth experience in NESA requirements implementation.
• In-depth experience developing information security policies aligned with NESA requirements.
• Great communication skills.
• Creative thinking and ability to consider alternatives and new approaches.
• Ability to adapt to fast-moving IT landscape.
• Multi-tasking and ability to manage several concurrent projects and prioritize demands.

Professional Certifications

• CISM, CRISC, CISA or CISSP certification required; CISM, CRISC, CISA and/or CISSP preferred.

Additional Information

• Joining timeframe: 30 days.