Dubai-based CISO: Cloud-Secure Payments & Risk Leadership

myZoi; Dubai; On-site; AED 1,000,000 - 1,500,000; Full time

Job summary

myZoi is seeking a Chief Information Security Officer (CISO) to lead the organisation's cybersecurity and information security programme in a cloud-native payments and SVF environment. You will define and execute security strategy, own cyber risk, and ensure regulatory compliance with Board-approved budgets.

You will advise on security risk to CTO/CEO and Board Risk Committee, oversee vulnerability management, incident response, data protection, and third-party security across the enterprise.

Qualifications

• 10+ years of information security experience, with at least 5 years in a leadership role.
• Experience in a regulated financial services environment (banking, payments, fintech, or SVF).
• Hands-on experience with PCI DSS lifecycle in a payment environment.
• Proven track record leading incident response during live security events.
• Experience with regulatory frameworks: CBUAE technology and information security risk circulars, UAE IA, or equivalent.
• Ability to communicate security risk to executives and board-level audiences.
• Ability to deliver security outcomes within constrained budgets, prioritising risk reduction per spend.

Responsibilities

• Define and maintain a multi-year cybersecurity strategy aligned with business growth, risk appetite, and regulatory obligations.
• Establish and maintain the information security policy framework, reviewed at least annually.
• Direct the enterprise vulnerability management programme, including scanning, risk-based prioritisation, and remediation SLA enforcement.
• Oversee the penetration testing programme and ensure findings are remediated and retested within defined timelines.
• Maintain threat intelligence capability relevant to financial services and payments, translate into detection and control improvements.
• Oversee security monitoring, detection and response including SIEM, EDR/XDR, and SOC operations.
• Own incident response end to end: playbooks, tabletop exercises, containment and recovery, regulatory notification within deadlines.
• Manage identity and access governance including RBAC design, privileged access management, joiner/mover/leaver controls, recertification.
• Define and enforce data loss prevention and data classification standards across platforms.
• Maintain cloud security posture standards for the AWS estate.
• Embed security-by-design in the engineering lifecycle, secure SDLC, code reviews, and CI/CD controls.
• Maintain data protection and privacy controls, cross-border transfer obligations.

Skills

Leadership

Strategic thinking

Risk communication

Budgeting

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Certifications: CISSP, CISM, CISA, ISO27001 Lead Auditor

Tools

SIEM

Incident response tools

Job description

myZoi is seeking a Chief Information Security Officer (CISO) to lead the organisation's cybersecurity and information security programme in a cloud-native payments and SVF environment. You will define and execute security strategy, own cyber risk, and ensure regulatory compliance with Board-approved budgets.

You will advise on security risk to CTO/CEO and Board Risk Committee, oversee vulnerability management, incident response, data protection, and third-party security across the enterprise.