Cyber Governance, Risk & Compliance Manager

Yello; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

Yello seeks a senior cyber risk professional to lead assessments across systems and third parties, translating exposures into actionable risk positions. You will map controls to UAE Information Assurance Standards and support external audits, maintaining ISO/IEC 27001 evidence.

The role requires hands-on technical assessment and strong compliance expertise. Responsibilities include designing control tests, maintaining the risk register, and communicating risk positions to stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Information Security or a related technical discipline.
• Minimum 6 years' experience across cyber risk, compliance or security assurance, including hands-on technical assessment.
• Direct experience with UAE Information Assurance Standards or a comparable national framework, alongside experience supporting external certification audits.
• Strong knowledge of ISO/IEC 27001, NIST Cybersecurity Framework and technical security controls spanning identity, network, endpoint, cloud, applications and data.
• CRISC, CISA, CISM, ISO/IEC 27001 Lead Auditor or Lead Implementer certification would be highly advantageous.

Responsibilities

• Lead technical cyber risk assessments across systems, architectures, changes and third parties, translating exposure into clear, actionable risk positions.
• Map technical controls against UAE Information Assurance Standards and other applicable regulatory requirements, identifying gaps and driving remediation.
• Own and maintain robust evidence for certifications including ISO/IEC 27001, supporting internal and external audits and regulatory assessments.
• Design and execute control testing through configuration reviews, sampling and technical validation to ensure controls operate effectively.
• Maintain an accurate cyber risk register and communicate risk and compliance positions clearly to key stakeholders.

Job description

Our client is a major UAE-based industrial organisation with a sophisticated and evolving digital landscape. The business is investing significantly in cybersecurity, digital capabilities and robust governance to protect critical operations.

• Lead technical cyber risk assessments across systems, architectures, changes and third parties, translating exposure into clear, actionable risk positions.
• Map technical controls against UAE Information Assurance Standards and other applicable regulatory requirements, identifying gaps and driving remediation.
• Own and maintain robust evidence for certifications including ISO/IEC 27001, supporting internal and external audits and regulatory assessments.
• Design and execute control testing through configuration reviews, sampling and technical validation to ensure controls operate effectively.
• Maintain an accurate cyber risk register and communicate risk and compliance positions clearly to key stakeholders.

• Bachelor's degree in Computer Science, Information Security or a related technical discipline.
• Minimum 6 years' experience across cyber risk, compliance or security assurance, including hands-on technical assessment.
• Direct experience with UAE Information Assurance Standards or a comparable national framework, alongside experience supporting external certification audits.
• Strong knowledge of ISO/IEC 27001, NIST Cybersecurity Framework and technical security controls spanning identity, network, endpoint, cloud, applications and data.
• CRISC, CISA, CISM, ISO/IEC 27001 Lead Auditor or Lead Implementer certification would be highly advantageous.