Technical Assurance Manager

Role Overview

Technical Assurance Manager at ADIB, Abu Dhabi. Lead second-line technical security assurance across infrastructure, applications, databases, cloud, networks, security platforms and critical business services.

Role Purpose

Own ADIB's risk-based Technical Assurance Plan, methodologies and tools to provide evidence-based conclusions on control design, implementation, compliance and operating effectiveness. Lead technical regulatory assurance, Red Team assurance and cyber resilience assurance. Deliver independent challenges, reports, retests and validation of remediation while first-line functions retain accountability for control ownership, operation and remediation.

Key Responsibilities

Planning & Risk Management

• Develop and execute a risk-based annual assurance plan covering critical services, technologies, controls and relevant third parties.
• Maintain the assurance universe and prioritize reviews using criticality, threats, regulatory obligations, change, incidents and prior findings.
• Assess findings by likelihood, exploitability, impact, criticality and compensating controls; align ratings with the Enterprise Risk Framework.

Technical Assessment & Testing

• Independently test control design, implementation, compliance and operating effectiveness using evidence-based methods.
• Own assurance methodologies, test scripts, sampling and evidence standards, aligned with NIST, ISO 27001, PCI DSS, SWIFT CSCF, UAE and CBUAE requirements.
• Operate assurance tools and expand automated or continuous monitoring to identify control drift, gaps and non-compliance.
• Use penetration-testing and vulnerability results as assurance evidence, avoiding duplication of first-line specialist testing.

Regulatory & Compliance Assurance

• Lead second-line technical assurance for regulatory and industry obligations, maintaining traceability from requirements to controls and evidence.
• Provide assurance validation to projects and technology change without assuming first-line control ownership in line with assurance plan.
• Support inspections and audits with complete, accurate and audit-ready evidence, working papers and responses.

Red Team & Cyber Resilience

• Define and govern threat-informed Red Team exercises; coordinate specialist execution and validate preventive, detective, response and recovery controls.
• Assure cyber resilience, recovery integrity, security-control survivability, crisis simulation, dependency mapping and applicable RTO/RPO evidence required for cybersecurity and privacy.

Emerging Technologies & Specialized Assessments

• Assess AI/ML and AI-enabled technologies, including access, data protection, integration security, monitoring, prompt/output integrity and adversarial testing.

Finding & Remediation Management

• Own the finding lifecycle from evidence validation and risk rating through escalation, independent retesting and closure.

Stakeholder Coordination & Leadership

• Coordinate with Cyber Defense, Technology, Risk, Compliance, Internal Audit and control owners while preserving second-line independence.
• Manage and develop the Technical Assurance team and keep assurance scope, methods and tooling current with emerging threats and regulatory change.

Qualifications & Experience

• Bachelor's or master's degree in information security, cybersecurity, engineering, computer science, IT or a related discipline.
• Deep expertise in second-line technical assurance and evidence-based assessment across infrastructure, applications, databases, cloud, networks and security platforms.
• Strong knowledge of control design and operating-effectiveness assessment.
• Working knowledge of major information security, cybersecurity and regulatory control frameworks.

Skills & Competencies

• Strong technical risk assessment, evidence evaluation, documentation, stakeholder management and executive reporting skills.
• Knowledge of NIST SP 800-53A and NIST SP 800-115 assessment principles.
• Familiarity with ISO/IEC 27001, NIST CSF, PCI DSS, SWIFT CSCF, UAE Information Assurance and CBUAE requirements.
• Practical experience with automated compliance, continuous assurance, technical telemetry, configuration evidence and security-platform data.
• Understanding of penetration testing, vulnerability assessment, Red/Purple Team methods, MITRE ATT&CK, OWASP, PTES and CIS Benchmarks.
• Knowledge of IAM/PAM, SIEM/SOC, DLP, cryptography, certificate management, CSPM/CASB, WAF, DDoS and endpoint security.
• Understanding of cyber resilience, recovery controls, dependency validation, recovery integrity and resilience-testing evidence.

Additional Information

• Relevant certifications such as CISA, CISSP, CRISC, CISM, OSCP, GPEN, GIAC or PCI ISA/QSA are desired; combined assurance and technical credentials are preferred.