Head of Security & DevSecOps - FinTech

CFI Financial Group; Dubai; On-site; AED 600,000 - 900,000; Full time

Job summary

CFI Financial Group is a leading online trading and financial services provider seeking a Head of Security in Dubai. You will design and lead the cybersecurity function, reporting directly to the CEO, and integrate security into our development and delivery pipelines.

You will oversee security governance, risk management, and regulatory compliance in a fast-paced, global, multi-office environment. The role requires hands-on security engineering, leadership, and a pragmatic approach to protect

Qualifications

• 8+ years in information security roles.
• 3+ years in security leadership positions.
• Mandatory: Experience in regulated financial services.
• Hands-on penetration testing and vulnerability assessment experience.
• Development or DevOps background with practical coding experience.
• Successfully implemented DevSecOps practices and security automation.
• Experience with regulatory audits and compliance assessments.

Responsibilities

• Build security frameworks (ISO 27001, NIST CSF, CIS Controls, SOC 2) and ensure regulatory compliance.
• Implement information security governance structure, policies, and risk management processes.
• Establish and maintain security metrics, KPIs, and reporting for executive leadership.
• Secure Perimeter & Infrastructure Protection - design and implement network segmentation and secure perimeter architecture.
• Collaborate with development teams to establish secure SDLC practices: integrate security into CI/CD pipelines with automated gates (SAST, DAST, SCA, container scanning).
• Conduct penetration testing and API security assessments using Kali Linux, Metasploit, Burp Suite, and other offensive tools.
• Provide hands-on remediation guidance that developers can implement.

Skills

Security leadership

Communication

Collaboration

Business alignment

Education

OSCP

OSCE

GPEN

CEH

CISSP

CISM

CCSP

AWS Security Specialty

Azure Security Engineer

CISA

Tools

Kali Linux

Metasploit

Burp Suite

Nmap

Wireshark

SQLMap

Python

Bash

Zsh

PowerShell

Job description

CFI Financial Group is a leading online trading and financial services provider seeking a Head of Security in Dubai. You will design and lead the cybersecurity function, reporting directly to the CEO, and integrate security into our development and delivery pipelines.

You will oversee security governance, risk management, and regulatory compliance in a fast-paced, global, multi-office environment. The role requires hands-on security engineering, leadership, and a pragmatic approach to protect