Cyber Security Risk Managment Opportunities

Abu Dhabi Commercial Bank; Abu Dhabi; Remote; AED 450,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive medical insurance

Flexible remote working options

Learning & development programs

Job summary

ADCB seeks a senior information security leader within Group Risk Management to design and govern cyber security strategies. You will oversee vulnerability management, incident response, and security operations, ensuring risk is managed within defined appetite while aligning with international standards.

The role requires deep expertise in information security, risk assessment, and security architecture, with a track record of leading security programs and teams in the banking sector.

Qualifications

• Must have extensive information security knowledge with focus on risk and vulnerability assessment.
• Professional certifications such as CISSP, CISA, GIAC or CEH are highly valued.
• Experience in leading security teams and implementing security architectures.

Responsibilities

• Manage and direct information security programs and incident response activities.
• Lead vulnerability management lifecycle and penetration testing programs.
• Develop and enforce information security policies and technical standards.
• Monitor SOC operations and lead cross-functional response to incidents.
• Advise on risk assessments and ensure regulatory compliance and governance.

Skills

Information security

Risk management

Incident response

Leadership

Education

Bachelor's Degree in Computer Science or equivalent

Certifications: CISSP, CISA, GIAC, CEH

Tools

SIEM

Firewall

IDS/IPS

Vulnerability assessment tools

Job description

Embark on a journey where your unique contributions are celebrated, and your professional growth is embraced. At ADCB, we nurture a diverse, inclusive community where every voice is valued.

About the business area - Group Risk Management

ADCB prioritises a disciplined approach to risk, recognising its fundamental importance to the Bank’s long-term organisational and financial resilience. Group Risk Management oversees the implementation of ADCB's risk objectives, identifying and addressing gaps in the bank's risk infrastructure/framework. Their responsibilities include nurturing the independence of the risk function, establishing provisioning policies, and introducing changes to energise risk awareness among front office personnel and decision-makers. Continuously tuning the risk organisation in line with market best practices, they manage ADCB's portfolio and associated risks to international standards, while establishing a clear risk culture across all areas of operation.

In this role, your key responsibilities include:

• To manage and implement ADCB’s cyber security and incident response strategy by designing and implementing security measures, conducting vulnerability assessment and monitoring and managing the response to cybersecurity incidents to ensure the Bank operates within a pre-defined risk appetite to mitigate any foreseeable cyber security threats
• Evaluate technical risk, design, architecture, feasibility analysis, vendor review and security controls of all infrastructure technologies and business systems being implemented in the Bank in order to identify non-compliance areas and address these accordingly
• Manage programmes and projects in order to implement new information security products, tools, and innovations that would augment the controls and improve user experience
• Research the latest trends in threats, threat actors, industry security news, global security incidents and trends to ensure that the Bank is protected against similar scenarios and design, develop and implement technical information security frameworks in line with the required standards
• Manage and implement the vulnerability management lifecycle and penetration testing on the Banking infrastructure and systems to ensure that all the Bank’s technology systems are continuously protected against threats
• Manage the implementation of information security policies, procedures and technical standards in order to prevent unauthorised disclosures, unauthorised use, inappropriate modification, premature deletion and unavailability of data and business/infrastructure systems
• Develop and ensure technology baselines for the secure management of systems across all platforms, including development and maintenance of encryption standards, intrusion detection strategy and network authentication to ensure all systems are secure and follow Banks requirements
• Manage an effective internal SOC to ensure effective monitoring is carried out by SOC staff for any unauthorised use or leakage of sensitive data from the Bank, phishing attacks, social media abuse and other malicious activities that could bring about reputational damage for the Bank or unauthorised access to Bank’s critical systems
• Build capabilities within the SOC for advanced malware analysis, forensics and detection of advanced persistent threats to ensure security of the systems
• Design and implement a continuous monitoring strategy for the Bank’s information systems according to the threat landscape for evidence of malicious activity or intrusion attempts to ensure ongoing security of the systems
• Run programmes for the implementation of automated tools in order to bring efficiencies, log collection, correlation, and analysis tools for effective monitoring of security
• Provide advisory services to business and infrastructure projects on maintaining adequate audit trails to ensure that sufficient evidences of computerised business activities exists to reconcile accounts
• Detect frauds, identify unauthorised access attempts and breaks ins and quickly resolve problems in order to maintain secure and reliable information systems within ADCB
• Create and oversee crisis and emergency management practices and provide in-depth technical advice for investigations of information security incidents such as internal frauds and hacker break-ins, ensuring root cause analysis is performed in order to identify and recommend corrective actions to prevent similar incidents from reoccurring
• Manage the SIRT (Security Incident Response Team) in order to conduct full coordinated cross functional response to major security incidents and lead the actions to a full remediation of any potential causes of security breach
• Provide technical information security consulting assistance for ADCB staff disciplinary measures, civil suits and criminal prosecutions, if and when needed to ensure accurate information is given
• Review and recommend security configuration requirements for Big Data infrastructure in order to protect the confidentiality and integrity of customer’s personally identifiable information and to ensure availability of the system
• Review Big Data ecosystem/applications and determine where encryption is necessary in order to protect sensitive information
• Review big data ecosystem/applications and determine optimum set of role based access controls to ensure access is based on a need to know basis
• Review Big Data architecture and recommend appropriate controls to ensure the infrastructure is protected against all internal and external threats
• Conduct periodic vulnerability assessments, internal penetration testing and recommend remedial action to ensure systems are secure, any implemented fixes are working effectively and no new venerability gaps are evident
• Perform detailed risk assessments of Big Data ecosystem in order to provide recommendations
• Recommend baseline security standards for big data infrastructure to ensure optimum security
• Manage self and team in line with ADCB’s people management policies, procedures, processes and practices to ensure adherence and to maximise own and employee contribution to business performance
• Organise and supervise the activities and work of the team to ensure that targets and objectives are achieved and the business plan is delivered in line with the required policies, processes, procedures and systems
• Sound understanding of the vulnerabilities in operating systems, databases and major applications and the technical knowledge necessary to mitigate these
• Working knowledge experience of Banking operations and related problems
• Strong awareness of application security requirements and techniques
• Extensive experience in enterprise security architecture design, vulnerability management
• Knowledge and ability to apply risk management techniques to security policy enforcement and compliance
• Problem solving

The ideal candidate should have the following experience

• At least 8 years of experience in the Banking industry or similar environment, with at least 4 years of related managerial experience
• Bachelor’s Degree in Computer Science or equivalent
• Professional Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), SANS Global Information Assurance Certificate (GIAC) or Certified Ethical Hacker (CEH)
• In-depth knowledge in information security, specifically in risk/vulnerability assessment, data classification and industry standard frameworks such as ISO 27001, Payment Card Industry Data Security Standard (PCI-DSS)
• Thorough knowledge of firewalls, network components, protocols, intrusion prevention systems, antivirus software, web content filtering, database products

What we offer:

• Competitive Salary & Additionally, all employees are eligible to participate in one of our rewarding variable pay plans.
• Comprehensive Benefits Package: This includes market-leading medical insurance, group life and personal accident insurance, paid leave and leave airfare, employee preferential rates on loans and finance facilities, staff discounts and offers, and children education assistance (for certain job levels).
• Flexible and Remote Working Options: We understand the importance of work-life balance and offer flexible working arrangements, subject to eligibility and job requirements.
• Learning and Development Opportunities: We value and facilitate continuous learning and personal development through a variety of exciting learning opportunities, such as structured instructor-led courses, a comprehensive e-learning catalog, on-the-job training, and professional development programs.

At ADCB, we are dedicated to creating a respectful, caring and disciplined work environment that aligns with your career ambitions.