Executive Manager - Squad Cyber Technical Lead

TAT IT Technolgies; Abu Dhabi; On-site; AED 500,000 - 900,000; Full time

Job summary

TAT IT Technolgies is seeking an Executive Manager to lead a security engineering squad covering AppSec, AI Governance, and Compliance Trail in Abu Dhabi. This 1LoD role owns delivery against 2LoD policies, ensuring SLA adherence and CBUAE inspection-readiness.

You will consolidate tooling, drive integration architecture, and act as primary 1LoD to 2LoD Risk and AI CoE, with hands-on experience in Azure and AWS security and DevSecOps.

Qualifications

• 12+ years in cybersecurity engineering with 5+ years proven leadership across DevSecOps, cloud security, and AI/LLM security.
• Banking or regulated-industry experience essential.
• Hands-on delivery across CI/CD security, IaC security, and AI/LLM security.
• Familiarity with CBUAE Decree‑Law 6/2025, Enabling Technologies Guidelines, AI/ML Guidance Note, NIST AI RMF, and ISO/IEC 42001.

Responsibilities

• Operate a multi-workstream security squad across AppSec, AI Governance, Continuous Security Validation, and Compliance Trail. Ensure delivery aligns with 2LoD policies and CBUAE inspection-readiness.
• Own the consolidated tooling stack, integration architecture, and DefectDojo→Attestation→Power BI evidence chain for audit reporting.
• Chair the Security Champions Guild and report monthly DevSecOps Governance Dashboard to 2LoD leadership with clear risk metrics and remediation posture.
• Align engineering controls with regulatory requirements (CB UAE) and global frameworks (NIST AI RMF, ISO/IEC 42001).
• Embed security into CI/CD pipelines across Azure and AWS; drive IaC security, container security, and automated control validation.
• Lead 3-Lines-of-Defense operations and coordinate with 2LoD for policy interpretation and independent testing.

Skills

Technical Leadership

Cloud Security

DevSecOps

AI/LLM Security

Regulatory Compliance

Stakeholder Management

Governance

Tools

SonarQube

Snyk

ServiceNow IRM

Microsoft Defender for Cloud

AWS Security Hub

DefectDojo

Power BI

Job description

We have an urgent requirement for Executive Manager - Squad Cyber Technical Lead( Head of AppSec, AI Governance, Continuous Security Validation, and Compliance Trai) with experience in banking domain is required for our banking clients in Abu Dhabi ,UAE

Operate a squad's 4-workstream delivery (AppSec / AI Governance / Continuous Security Validation / Compliance Trail) against 2LoD approved policies, with measurable SLA adherence and CBUAE inspection-readiness--

Must

Own the consolidated tooling stack (e.g. SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub) — vendor consolidation, integration architecture, and DefectDojo→Attestation→Power BI evidence chain.---

Must

1LoD role owns delivery against 2LoD-approved policies with measurable SLA adherence and CBUAE inspection-readiness---

Must

Deep expertise in Azure + AWS security, CI/CD security integration, OPA, and infrastructure-as-code security.--

Must

Strong working knowledge of SonarQube, Snyk, ServiceNow IRM, Microsoft Defender for Cloud, AWS Security Hub, Security Agent, and DefectDojo. Experience with Power BI for security metrics--

Must.

Banking or regulated-industry experience essential, including hands-on delivery against CBUAE (Decree-Law 6/2025, Enabling Technologies Guidelines, AI/ML Guidance Note), NIST AI RMF and ISO/IEC 42001.--

-Must

Job Summary

We are seeking a senior technical leader to operate and scale a multi-disciplinary security engineering squad covering Application Security, AI Governance, Continuous Security Validation, and Compliance Trail. This 1LoD role owns delivery against 2LoD-approved policies with measurable SLA adherence and CBUAE inspection-readiness. You will consolidate tooling, drive integration architecture, and act as the primary 1LoD counterpart to 2LoD Risk and the AI Center of Excellence.

Key Responsibilities

Multi-Workstream Delivery Leadership

Operate and lead a squad across 4 workstreams: AppSec, AI Governance, Continuous Security Validation, and Compliance Trail. Ensure all delivery is mapped to 2LoD-approved policies with measurable SLA adherence and maintained CBUAE inspection-readiness.

Tooling Stack Ownership & Integration

Own the consolidated security tooling stack including SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub. Drive vendor consolidation, define integration architecture, and maintain the DefectDojo → Attestation → Power BI evidence chain for audit and regulatory reporting

1LoD Governance & Stakeholder Management

Act as the primary 1LoD counterpart to 2LoD Risk and AI CoE. Chair the Security Champions Guild, arbitrate cross-workstream priorities, and present the monthly DevSecOps Governance Dashboard to 2LoD leadership with clear risk metrics, SLA status, and remediation posture.

Regulatory & Policy Alignment

Ensure hands-on delivery aligns with CBUAE requirements including Decree-Law 6/2025, Enabling Technologies Guidelines, and AI/ML Guidance Note. Align engineering controls and processes to NIST AI RMF and ISO/IEC 42001. Maintain evidence for regulatory inspections.

DevSecOps & Cloud Security Engineering

Embed security into CI/CD pipelines across Azure and AWS environments. Drive shift-left practices, IaC security, container security, and automated control validation. Lead security engineering for AI/LLM systems including model supply chain, prompt security, and runtime guardrails.

3-Lines-of-Defense Operations

Implement and operate controls in 1LoD while engaging credibly with 2LoD on policy interpretation, assurance activities, and independent testing coordination. Support 3LoD audit requirements with complete evidence trails.

Required Qualifications & Skills

Technical Leadership: Demonstrated ability to lead multi-disciplinary squads and manage cross-workstream delivery against SLAs. Cloud & DevSecOps: Deep expertise in Azure + AWS security, CI/CD security integration, OPA, and infrastructure-as-code security. AI/LLM Security: Hands-on experience securing AI/ML pipelines, LLM deployments, and AI agents. Familiarity with Claude, Codex, and AI red‑teaming concepts. Tooling: Strong working knowledge of SonarQube, Snyk, ServiceNow IRM, Microsoft Defender for Cloud, AWS Security Hub, Security Agent, and DefectDojo. Experience with Power BI for security metrics. Regulatory & Frameworks: Working knowledge of CBUAE Decree‑Law 6/2025, CBUAE Enabling Technologies Guidelines, CBUAE AI/ML Guidance Note, NIST AI RMF, and ISO/IEC 42001. Governance: Proven experience operating within a 3-Lines-of-Defense model. Strong stakeholder management with 2LoD Risk, Compliance, and AI CoE. Required Qualifications & SkillsExperience: 12+ years in cybersecurity engineering with 5+ years proven leadership across DevSecOps, cloud security, and AI/LLM security. Banking or regulated-industry experience essential.

Certifications :

• CCSP or AWS Certified Security – Specialty or Azure Security Engineer Associate
• CISM or ISO/IEC 42001 Lead Implementer
• Certified DevSecOps Professional (CDP) or equivalent.(Anyone Must)Desirable: SABSA, GIAC GCSA Skills: devsecops,aws,security