Enterprise Cyber Risk Leader: Data-Driven & Board-Ready

Client of Salt; Dubai; On-site; AED 600,000 - 900,000; Full time

Job summary

Client of Salt seeks an experienced Information & Cybersecurity Risk Manager to lead the design governance and ongoing development of an enterprise-wide cyber-risk management framework. This senior role aims to move the organisation beyond compliance-led GRC toward proactive, data-driven risk management.

The role is based in Dubai, with responsibilities to establish risk methodologies, drive board-ready reporting, and collaborate with risk, audit, privacy and safety teams to mature a

Qualifications

• 10+ years experience across cybersecurity, information security, technology risk or GRC.
• Proven experience leading enterprise-wide cyber or information-risk programmes within a large, complex organisation.
• Strong executive and board-level stakeholder management, with the ability to translate cyber risk into commercial and operational impact.
• Genuine experience with cyber-risk quantification, data-led risk analysis or advanced risk modelling.
• Strong knowledge of global cybersecurity, privacy and data-protection regulations.
• Experience assessing risks across cloud, technology transformation, third parties and enterprise business processes.
• CRISC certification is essential.
• CISM, CISA or equivalent certifications are highly desirable.
• Previous people-leadership and risk-function development experience.
• Background in aviation, transport, financial services, government, consulting or another highly regulated environment would be advantageous.

Responsibilities

• Lead and evolve the organisation s information and cybersecurity risk-management framework.
• Establish consistent risk methodologies governance and reporting across a complex global business.
• Drive accountability for information risk within business and technology teams.
• Lead cyber-risk governance forums and provide clear board-ready reporting on key risks treatment plans and exposure.
• Ensure material residual risks are appropriately escalated formally accepted and tracked.
• Prioritise and coordinate risk assessments across critical technology environments business processes major programmes and third parties.
• Introduce and mature quantitative risk practices including probabilistic assessment risk simulation and loss modelling.
• Partner with Enterprise Risk Internal Audit Privacy Safety and senior technology stakeholders.
• Support the assessment and management of emerging risks including AI and agentic AI.
• Lead targeted cyber-awareness and behavioural-change initiatives.
• Develop and upskill a high-performing cyber-risk function.

Skills

Cybersecurity risk management

Information security

GRC

Executive stakeholder management

Risk modelling

Job description

Client of Salt seeks an experienced Information & Cybersecurity Risk Manager to lead the design governance and ongoing development of an enterprise-wide cyber-risk management framework. This senior role aims to move the organisation beyond compliance-led GRC toward proactive, data-driven risk management.

The role is based in Dubai, with responsibilities to establish risk methodologies, drive board-ready reporting, and collaborate with risk, audit, privacy and safety teams to mature a