Chief Information Security & Risk Leader

TerraStakes; Dubai; Hybride; AED 450 000 - 850 000; Plein temps

Résumé du poste

TerraStakes in Dubai seeks a Head of Information Security to own governance, risk and data protection across the company. You will lead security controls, manage key material and ensure separation of duties, reporting directly to the CEO.

Build an ISMS, coordinate regulatory submissions and assurance activities, and guide a growing security team. The role covers cloud and application security, identity management, incident response and continuity planning, with strong emphasis on investor data

Qualifications

• 8+ years in information security, including time in a regulated financial institution, exchange, custodian, bank or licensed digital asset business.
• Built a security program from a low base, and can show what you built.
• Hands-on depth in at least two of cloud security, application security, cryptographic key management, or detection and response, with breadth across the rest.
• Practical key management and signing controls, including HSMs and multi-party or threshold schemes.
• Handled a real incident, including one that went badly.
• Regulator-or auditor-facing work, and the ability to write for that reader.
• Working knowledge of data protection and how it translates into system design.

Responsabilités

• Build the information security management system: policies, standards, control framework, risk register, exceptions and the governance forum that keeps it alive.
• Own the security content of regulatory submissions and the evidence behind every assertion.
• Prepare for external certification where it earns its place commercially.
• Govern key material: holders, signing thresholds, separation of duties, ceremonies, backup, recovery and destruction.
• Enforce maker-checker on every privileged action and ensure custody boundary with providers.
• Identity and access management across cloud, code, data and admin interfaces.
• Secure development lifecycle: threat modeling, design and code review, SAST/DAST, secrets management.
• Data protection: data mapping, retention, lawful basis, cross-border transfers and subject rights.
• Logging, incident response planning, business continuity and post-incident reviews.
• Fraud prevention and brand monitoring; investor-facing security guidance.
• Third-party risk, audits and regulator reporting; evidence on request.
• Build and lead the security function and communicate to regulators, auditors and board.

Connaissances

Security governance

Key management

Incident response

Data protection

Regulatory reporting

Identity & access management

Cloud security

Application security

Outils

HSMs

Description du poste

TerraStakes in Dubai seeks a Head of Information Security to own governance, risk and data protection across the company. You will lead security controls, manage key material and ensure separation of duties, reporting directly to the CEO.

Build an ISMS, coordinate regulatory submissions and assurance activities, and guide a growing security team. The role covers cloud and application security, identity management, incident response and continuity planning, with strong emphasis on investor data