Cyber Security Governance & Advisory Opportunities

Abu Dhabi Commercial Bank; Abu Dhabi; Hybrid; AED 720,000 - 1,200,000; Full time

Benefits offered by this job

Competitive Salary

Comprehensive Benefits Package

Flexible and Remote Working Options

Learning and Development Opportunities

Job summary

Abu Dhabi Commercial Bank is seeking a senior cybersecurity governance professional for Group Risk Management in the UAE. You will lead governance frameworks, policies, and incident response, ensuring alignment with global standards and UAE requirements.

With 8+ years in the field, you will manage risk assessments, regulatory reporting, and cross‑functional collaboration to strengthen the bank's security posture in a dynamic environment.

Qualifications

• 8+ years in cybersecurity governance within banking or regulated environments.
• Bachelor's degree in IT/Computer Science or equivalent.
• Certification: CISSP or CISM with ISO 27001 Lead Implementer/Auditor preferred.
• Knowledge of ISO/IEC 27001, NIST CSF and UAE banking regulations.

Responsibilities

• Lead development and implementation of cybersecurity governance frameworks, policies, and standards.
• Ensure governance aligns with global standards and UAE regulations.
• Formulate strategic plans for governance to support bank goals.
• Establish and enforce cybersecurity policies and procedures in line with best practices.
• Stay updated on UAE banking regulations and cybersecurity regulations; support audits.
• Conduct risk assessments and develop mitigation strategies for cyber risks.
• Oversee risk management processes and monitor risk posture.
• Develop and implement incident response and crisis management plans.
• Implement governance monitoring tools and report to senior management and regulators.
• Collaborate with internal/external stakeholders on governance matters.

Skills

Cybersecurity governance leadership

Analytical thinking

Problem-solving

Communication & collaboration

Strategic planning

Stakeholder management

Education

Bachelor's Degree in IT/Computer Science

Job description

Embark on a journey where your unique contributions are celebrated, and your professional growth is embraced. At ADCB, we nurture a diverse, inclusive community where every voice is valued.

About the business area - Group Risk Management

ADCB prioritises a disciplined approach to risk, recognising its fundamental importance to the Bank’s long-term organisational and financial resilience. Group Risk Management oversees the implementation of ADCB's risk objectives, identifying and addressing gaps in the bank's risk infrastructure/framework. Their responsibilities include nurturing the independence of the risk function, establishing provisioning policies, and introducing changes to energise risk awareness among front office personnel and decision-makers. Continuously tuning the risk organisation in line with market best practices, they manage ADCB's portfolio and associated risks to international standards, while establishing a clear risk culture across all areas of operation.

In this role, your key responsibilities include:

• To lead the development and implementation of comprehensive cybersecurity governance frameworks, methodologies, policies, standards, and procedures to ensure that cybersecurity governance aligns with global standards and UAE specific regulations
• Develop and implement robust cybersecurity governance frameworks to ensure compliance with cybersecurity global standards, UAE specific cybersecurity Banking regulations
• Formulate and implement strategic plans for cybersecurity governance to ensure alignment with Banks goals and industry best practices
• Establish and enforce essential cybersecurity policies, standards and procedures, aligning these policies with industry best practices and regulatory requirements to ensure best practice solutions are considered and implemented
• Review and maintain own knowledge of updating UAE Banking regulations and other relevant cybersecurity regulations, facilitating audits, compliance checks and continuous improvement of governance practices to ensure compliance and adherence
• Conduct risk assessments, identifying potential threats and vulnerabilities, developing mitigation strategies and action plans in order to manage cybersecurity risks effectively
• Oversee risk management processes, including risk identification, assessment and mitigation to ensure continuous monitoring and reporting of risk posture
• Develop and implement incident response plans and procedures, crisis management plans and crisis management procedures to ensure timely and effective response to cybersecurity incidents
• Implement and manage governance monitoring tools and processes to ensure compliance and effectiveness of cybersecurity governance frameworks
• Prepare regular reports for senior management and regulatory bodies to ensure their full understanding of the current situation and potential issues
• Work closely with internal and external stakeholders, including regulatory bodies, to ensure effective communication and collaboration on cybersecurity governance matters
• Stay updated with the latest cybersecurity governance trends, technologies, and threats, making recommendations for updates and changes to Banks guidelines in order to continuously improve governance practices and solutions and to enhance the overall cybersecurity posture of the Bank
• Adhere to all relevant organisational and departmental policies, processes, standard operating procedures and instructions so that work is carried out to the required standard and in a consistent manner while delivering the required standard of service to customers and stakeholders

The ideal candidate should have the following experience

• At least 8 years of experience in cybersecurity governance roles, preferably in the Banking sector or a similar regulated environment
• Bachelors Degree in IT/Computer Science
• Both certifications Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager CISM must have at least one: ISO 27001:2022 Lead Implementer or Lead Auditor
• Cybersecurity Governance Frameworks (e.g., ISO/IEC 27001, NIST CSF)
• UAE-specific regulations (UAE IA Standards, Central Bank of the UAE (CBUAE) Rulebook, Open Finance)
• Policy development and compliance
• Risk management and risk assessment
• Incident response
• Governance monitoring and reporting
• Strategic planning and leadership
• Strong analytical and problem-solving skills
• Excellent communication and collaboration skills
• Strong strategic capabilities
• In-depth understanding of cybersecurity principles
• Ability to work collaboratively with various stakeholders to enhance the cybersecurity posture of the Bank

What we offer:

• Competitive Salary & Additionally, all employees are eligible to participate in one of our rewarding variable pay plans.
• Comprehensive Benefits Package: This includes market-leading medical insurance, group life and personal accident insurance, paid leave and leave airfare, employee preferential rates on loans and finance facilities, staff discounts and offers, and children education assistance (for certain job levels).
• Flexible and Remote Working Options: We understand the importance of work-life balance and offer flexible working arrangements, subject to eligibility and job requirements.
• Learning and Development Opportunities: We value and facilitate continuous learning and personal development through a variety of exciting learning opportunities, such as structured instructor-led courses, a comprehensive e-learning catalog, on-the-job training, and professional development programs.

At ADCB, we are dedicated to creating a respectful, caring and disciplined work environment that aligns with your career ambitions