Chief Information Security Officer

Warner Scott; Abu Dhabi; On-site; AED 600,000 - 1,000,000; Full time

Job summary

Warner Scott in Abu Dhabi is seeking a seasoned CISO to define security strategy across the group, partnering with the CEO and executive team to embed security into business decisions. You will lead architecture, risk, governance, and incident readiness, and act as trusted advisor on secure growth.

You will manage regulatory requirements in UAE banking, oversee audits, and drive enterprise-wide security programs with credibility at board level.

Qualifications

• 12+ years of experience in financial services, including 8+ years in senior roles across information security, IT risk or audit.
• Proven record of leading enterprise-wide security programmes in a regulated banking environment.
• Strong knowledge of UAE banking regulation and the local legal and compliance landscape.
• Credibility at executive and board level with the ability to challenge and push back when needed.
• High emotional intelligence with strong influencing, conflict resolution and communication skills.
• Strategic thinker who can describe a future-state security blueprint and deliver it at pace.
• Certifications such as CISSP, CISM or CISA are advantageous.

Responsibilities

• Define and lead the group information security strategy and keep it updated with changing technology, threats and regulation.
• Lead security architecture, frameworks and governance across all platforms.
• Own information security policies and standards and ensure adoption across the organisation.
• Lead IS risk management, including risk assessments, root-cause analysis and reporting to senior management with remediation plans.
• Oversee security of applications, systems, networks and data, including identity and access management.
• Develop and maintain incident response and breach management procedures and lead responses to security events.
• Act as senior point of contact for internal/external audits, regulators and internal control functions on security and compliance matters.
• Partner with Enterprise Architecture, Technology, Finance, HR, Marketing and business lines on security design and advisory.
• Build budgets and investment cases for security technology and capability upgrades.
• Represent the bank on industry committees and in the wider security community.

Skills

Security leadership

Executive communication

Strategic planning

Regulatory knowledge

Stakeholder management

Incident response

Job description

The Opportunity

As CISO, you will set the direction for information security across the group. You will work closely with the CEO, COO and executive peers to make sure security is built into business strategy from the start. You will lead the bank’s cyber security agenda across architecture, governance, risk, compliance and incident readiness, and act as a trusted advisor to the business on how to grow securely.

Key Responsibilities

• Define and lead the group information security strategy, and keep updating it as technology, threats and regulation change.
• Lead security architecture, frameworks and governance across all platforms, in line with international standards and best practice.
• Own information security policies and standards, and make sure they are communicated, adopted and enforced across the organisation.
• Lead IS risk management, including risk assessments, root-cause analysis and regular risk reporting to senior management, with clear remediation plans.
• Oversee the security of applications, systems, networks and data, including identity and access management and perimeter protection.
• Develop and maintain incident response and breach management procedures, and lead the response to security events.
• Act as the senior point of contact for internal and external audit, regulators and internal control functions on security and compliance matters.
• Partner with Enterprise Architecture, Technology, Finance, HR, Marketing and the business lines on security design, exception management and advisory.
• Build budgets and investment cases for security technology and capability upgrades.
• Represent the bank on industry committees and in the wider security community.

About You

• At least 12 years’ experience in financial services, including 8 or more years in senior roles across information security, IT risk or audit.
• A proven record of leading enterprise-wide security programmes in a regulated banking environment.
• Strong knowledge of UAE banking regulation and the local legal and compliance landscape.
• Credibility at executive and board level, with the confidence to challenge and push back on the business when needed.
• High emotional intelligence and strong skills in influencing, resolving conflict and communicating.
• A strategic thinker who can clearly describe a future-state security blueprint and deliver it at pace.
• Relevant certifications such as CISSP, CISM or CISA are advantageous.