Assistant Manager, InfoSec Programme & Change Management

Network International; United Arab Emirates; On-site; AED 502,000 - 725,000; Full time

Job summary

Network International is seeking an experienced Programme Manager for Information Security to govern multi-workstream security programmes, track milestones, RAID logs and benefits realization. You will prepare Board and ExCo materials, ensuring clear executive narratives and alignment with strategic risk goals.

The role requires 3–6 years in programme or project management within technology or security, with fluency in both agile and waterfall methods and proven stakeholder collaboration across

Qualifications

• Bachelor's degree in a related field.
• Experience in programme or project management, ideally in security or technology.
• Ability to produce executive-ready materials and reports.
• Proficiency with RAID, milestone tracking and portfolio governance.

Responsibilities

• Establish and maintain security portfolio governance across multi-workstreams; track milestones and RAID logs.
• Prepare board and ExCo reporting materials with clear executive narrative.
• Maintain milestone and benefits tracking; update baseline to evidence capability and cost savings.
• Support change enablement and stakeholder communications using change management practices.
• Maintain a single source of truth for portfolio status with cross-workstream coordination.
• Track resourcing and budget consumption; flag variances early to CISO and owners.
• Facilitate governance forums and document actions and decisions.
• Apply agile and waterfall delivery fluency as appropriate to each workstream.

Skills

Programme management

Governance

Risk management

Stakeholder management

Change management

Agile & Waterfall

Education

Bachelor's degree

Job description

Job Description

Role Purpose

Network International is the leading enabler of digital commerce across the Middle East and Africa, providing payment technology and services to banks, merchants, fintechs and governments.

Network International's Information Security function runs a broad, multi-workstream security programme spanning Cyber Resilience Operations, Governance, Risk & Compliance, Security Architecture & Engineering and AI & Data Security Governance. This role is the dedicated programme discipline behind that portfolio, giving the Group CISO's leadership team reliable, single-source-of-truth visibility of milestones, dependencies and risk.

The role maintains the RAID logs, milestone tracking and benefits evidence, and prepares Board, Technology Advisory Committee and ExCo reporting inputs, applying structured change-management methodology to help sequence portfolio change without creating unmanaged delivery risk.

Key Responsibilities

• Establish and maintain security portfolio governance across the multi-workstream programme, tracking milestones, dependencies, RAID (risks, assumptions, issues, decisions) logs and status against plan.
• Prepare committee reporting inputs on programme progress for Board, Technology Advisory Committee and ExCo materials, translating technical workstream detail into clear executive narrative.
• Maintain milestone and benefits tracking for the security transformation programme, updating the baseline against which capability, cost and risk-reduction benefits are evidenced.
• Support change enablement and stakeholder communications activity across the security portfolio, applying recognised organisational change management methodology to help sequence change and reduce stakeholder fatigue.
• Maintain a single source of truth for portfolio status, working closely with workstream leads across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance to keep data current.
• Track resourcing and budget consumption against the portfolio plan, flagging variances early to the Group CISO and relevant workstream owners.
• Facilitate programme governance forums (steering meetings, milestone reviews) and ensure actions and decisions are documented and followed through.
• Apply agile and waterfall delivery fluency as appropriate to each workstream, adapting tracking and reporting cadence to how each workstream actually delivers.

Governance & Interfaces

• Provides programme-level reporting input to the Group's executive risk and technology committees, in coordination with the Group CISO's office.
• Works across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance as a neutral programme coordinator rather than an owner of workstream content.
• Reports programme risk into GRC as part of the enterprise risk register discipline, without assuming GRC's independent assurance role.
• Liaises with the wider NI Technology PMO to ensure security-portfolio milestones are correctly reflected in enterprise-level portfolio reporting where dependencies exist.

Qualifications & Experience

• Bachelor's degree in business, project management, information technology or a related discipline.
• 3–6 years of experience in programme or project management, ideally within technology, risk or security functions in a regulated industry; banking, payments or financial-services exposure preferred.
• Demonstrated experience contributing to Board- or executive-committee-ready programme materials.
• Working knowledge of RAID management, milestone tracking and portfolio governance disciplines.
• Familiarity with structured change methodologies (e.g. Prosci/ADKAR) preferred, and their practical application to sequencing technology or security change.
• Working fluency in both agile and waterfall delivery approaches, with the judgement to apply the right tracking discipline to each workstream.
• Experience working across multiple stakeholder groups to consolidate status from disparate sources into a single coherent narrative.
• Exposure to a multi-market regulatory environment (MEA or equivalent) is an advantage.

Professional Certifications

None required at this level.

Preferred

• CAPM (Certified Associate in Project Management) or PRINCE2 Foundation
• Agile foundation certification (e.g. PMI-ACP, CSM) where the portfolio includes agile-delivered workstreams
• Change Management Certification
• A foundational security certification (e.g. CompTIA Security+ or SSCP) is a nice-to-have, not required, given the role’s programme rather than technical focus.

Aspirational for Progression

• PMP (Project Management Professional) or MSP (Managed Successful Programmes) Practitioner – not required at this level; supports progression to Manager-level programme roles.
• Skills (NI Security Functional Skills Framework)

Proficiency levels shown are calibrated to Job Level P2 in the Information Security functional skills framework.

Skill (NI Security Functional Skills Framework)

Expected Proficiency

• Change Management Foundational
• Cyber Security Policies Foundational
• Security Risk Management Foundational
• Compliance Review and management Foundational