Cyber Security Governance & Advisory Opportunities

Abu Dhabi Commercial Bank; Abu Dhabi Emirate; Hybrid; AED 469,000 - 625,000; Full time

Benefits offered by this job

Medical insurance

Life and personal accident insurance

Paid leave and travel allowance

Staff discounts and loans facilities

Education assistance

Job summary

Abu Dhabi Commercial Bank seeks a seasoned Cybersecurity Governance professional to lead the development and implementation of governance frameworks, policies and standards across Group Risk Management.

You will ensure regulatory compliance, conduct risk assessments, and drive strategic governance initiatives with cross-functional teams to strengthen the bank's cybersecurity posture.

Qualifications

• 8+ years in cybersecurity governance roles, preferably banking or regulated environment
• Bachelor's degree in IT/CS
• Certifications: CISSP and/or CISM with ISO27001 Lead Implementer or Lead Auditor
• Experience with ISO/IEC 27001 and NIST CSF
• Knowledge of UAE banking regulations and CB UAE standards
• Policy development, risk assessment and governance reporting
• Strong analytical, communication and leadership skills
• Ability to collaborate with stakeholders to improve cybersecurity posture

Responsibilities

• Lead development and implementation of cybersecurity governance frameworks, policies and standards in line with global and UAE regulations
• Ensure compliance with cybersecurity standards and regulatory requirements
• Formulate strategic plans for governance aligned with bank objectives
• Establish and enforce cybersecurity policies and procedures
• Stay updated on UAE banking regulations and relevant cybersecurity regulations
• Conduct risk assessments and develop mitigation plans
• Oversee risk management processes and reporting of risk posture
• Develop incident response and crisis management plans
• Implement governance monitoring tools and processes
• Prepare reports for senior management and regulators
• Collaborate with internal and external stakeholders on governance matters
• Proactively update governance practices to enhance bank cybersecurity posture

Skills

Cybersecurity governance

Experience in governance roles

Communication skills

Strategic leadership

Analytical skills

Regulatory awareness

Policy development

Education

Bachelor's in IT/Computer Science

Tools

CISSP

CISM

ISO27001 Lead Implementer

ISO27001 Lead Auditor

Job description

Embark on a journey where your unique contributions are celebrated, and your professional growth is embraced. At ADCB, we nurture a diverse, inclusive community where every voice is valued.

About the business area - Group Risk Management

ADCB prioritises a disciplined approach to risk, recognising its fundamental importance to the Bank’s long-term organisational and financial resilience. Group Risk Management oversees the implementation of ADCB's risk objectives, identifying and addressing gaps in the bank's risk infrastructure/framework. Their responsibilities include nurturing the independence of the risk function, establishing provisioning policies, and introducing changes to energise risk awareness among front office personnel and decision-makers. Continuously tuning the risk organisation in line with market best practices, they manage ADCB's portfolio and associated risks to international standards, while establishing a clear risk culture across all areas of operation.

In this role, your key responsibilities include

• To lead the development and implementation of comprehensive cybersecurity governance frameworks, methodologies, policies, standards, and procedures to ensure that cybersecurity governance aligns with global standards and UAE specific regulations
• Develop and implement robust cybersecurity governance frameworks to ensure compliance with cybersecurity global standards, UAE specific cybersecurity Banking regulations
• Formulate and implement strategic plans for cybersecurity governance to ensure alignment with Banks goals and industry best practices
• Establish and enforce essential cybersecurity policies, standards and procedures, aligning these policies with industry best practices and regulatory requirements to ensure best practice solutions are considered and implemented
• Review and maintain own knowledge of updating UAE Banking regulations and other relevant cybersecurity regulations, facilitating audits, compliance checks and continuous improvement of governance practices to ensure compliance and adherence
• Conduct risk assessments, identifying potential threats and vulnerabilities, developing mitigation strategies and action plans in order to manage cybersecurity risks effectively
• Oversee risk management processes, including risk identification, assessment and mitigation to ensure continuous monitoring and reporting of risk posture
• Develop and implement incident response plans and procedures, crisis management plans and crisis management procedures to ensure timely and effective response to cybersecurity incidents
• Implement and manage governance monitoring tools and processes to ensure compliance and effectiveness of cybersecurity governance frameworks
• Prepare regular reports for senior management and regulatory bodies to ensure their full understanding of the current situation and potential issues
• Work closely with internal and external stakeholders, including regulatory bodies, to ensure effective communication and collaboration on cybersecurity governance matters
• Stay updated with the latest cybersecurity governance trends, technologies, and threats, making recommendations for updates and changes to Banks guidelines in order to continuously improve governance practices and solutions and to enhance the overall cybersecurity posture of the Bank
• Adhere to all relevant organisational and departmental policies, processes, standard operating procedures and instructions so that work is carried out to the required standard and in a consistent manner while delivering the required standard of service to customers and stakeholders

The ideal candidate should have the following experience

• At least 8 years of experience in cybersecurity governance roles, preferably in the Banking sector or a similar regulated environment
• Bachelors Degree in IT/Computer Science
• Both certifications Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager CISM must have at least one: ISO 27001:2022 Lead Implementer or Lead Auditor
• Cybersecurity Governance Frameworks (e.g., ISO/IEC 27001, NIST CSF)
• UAE-specific regulations (UAE IA Standards, Central Bank of the UAE (CBUAE) Rulebook, Open Finance)
• Policy development and compliance
• Risk management and risk assessment
• Governance monitoring and reporting
• Strategic planning and leadership
• Strong analytical and problem-solving skills
• Excellent communication and collaboration skills
• Strong strategic capabilities
• In-depth understanding of cybersecurity principles
• Ability to work collaboratively with various stakeholders to enhance the cybersecurity posture of the Bank

What we offer:

• Competitive Salary & Additionally, all employees are eligible to participate in one of our rewarding variable pay plans.
• Comprehensive Benefits Package: This includes market-leading medical insurance, group life and personal accident insurance, paid leave and leave airfare, employee preferential rates on loans and finance facilities, staff discounts and offers, and children education assistance (for certain job levels).
• Flexible and Remote Working Options: We understand the importance of work-life balance and offer flexible working arrangements, subject to eligibility and job requirements.
• Learning and Development Opportunities: We value and facilitate continuous learning and personal development through a variety of exciting learning opportunities, such as structured instructor-led courses, a comprehensive e-learning catalog, on-the-job training, and professional development programs.

At ADCB, we are dedicated to creating a respectful, caring and disciplined work environment that aligns with your career ambitions