Cybersecurity Governance & Cloud Risk - FS

Omanyp; Dubai; On-site; AED 250,000 - 350,000; Full time

Job summary

Omanyp in Dubai seeks a cybersecurity expert to manage audits, assess SaaS/cloud solutions, and lead the Cloud Security Committee. Ideal candidates have 7-10 years of experience in cybersecurity, focusing on compliance frameworks like ISO and GDPR.

You will engage closely with IT, Legal, and Compliance teams to strengthen security governance while supporting broader cybersecurity initiatives.

Qualifications

• 7-10 years of experience in cybersecurity, ideally in Big 4 or regulated environments.
• Strong experience with cybersecurity audits and compliance frameworks.
• Good technical understanding of cloud basics and security tools.

Responsibilities

• Manage cybersecurity audits and compliance activities including ISO and GDPR.
• Assess and approve SaaS/cloud solutions for compliance and security posture.
• Lead the Cloud Security Committee with cross-functional stakeholders.

Skills

Cybersecurity audits and compliance frameworks

Vendor risk management

Cloud security assessments

SSO and authentication

Encryption and data protection

Tools

Azure

PAM

Endpoint protection

Firewall

Job description

A highly regulated organisation in Dubai with an established cybersecurity function, focused on strengthening governance, managing risk, and improving security oversight across cloud and SaaS environments. The team is offering strong ownership and exposure to key decision making forums.

Responsibilities

• Manage cybersecurity audits and compliance activities (ISO, SOC2, GDPR, UAE regulations), including evidence collection and responses
• Assess and approve/reject SaaS and cloud solutions, evaluating areas such as data hosting, encryption, compliance, and security posture
• Design and manage vendor security questionnaires and conduct end-to-end risk assessments
• Lead the Cloud Security Committee, working with cross-functional stakeholders to make risk-based decisions
• Confidently challenge vendors and internal stakeholders using clear, evidence-based reasoning
• Support cybersecurity initiatives across areas such as IAM, third-party risk, and cloud security (non-hands-on)
• Apply understanding of key security concepts such as SSO, encryption, access control, and common security tools
• Prepare reports, dashboards, and KPIs for leadership and governance forums
• Support AI security assessments, including evaluation of tools like ChatGPT/LLM platforms and associated risks
• You will also support broader cybersecurity initiatives and reporting while working closely with stakeholders across IT, Legal, Compliance, and the business.

Qualifications

• 7-10 years experience in cybersecurity, ideally within Big 4 / consulting (Cyber, Risk, Technology) or Banking, investment, or other regulated environments
• Strong experience in:
  • Cybersecurity audits and compliance frameworks (ISO, SOC2, GDPR, UAE frameworks etc.)
  • Vendor risk management and SaaS/cloud security assessments
• Good technical understanding (not purely policy focused), including:
  • Cloud basics (Azure)
  • SSO and authentication
  • Encryption and data protection
  • Security tools such as PAM, endpoint protection, firewall, access etc.
• Experience assessing vendors and challenging gaps and working cross functionally in an organisation.
• Confident communicator, able to push back and make decisions independently
• Comfortable working in a small team with limited hand holding
• Open to learning and developing in areas such as AI security and emerging risks