Information Security Lead

Client of Salt; Dubai; On-site; AED 300,000 - 420,000; Full time

Job summary

Client of Salt is seeking a seasoned cybersecurity leader to own and drive information security across product development and cloud infrastructure. You will establish governance structures, security policies and a practical roadmap aligned with business priorities.

Responsibilities include embedding security in the software development lifecycle, managing vulnerabilities and incidents, and ensuring compliance with regulatory requirements while collaborating with contractors as needed.

Qualifications

• At least 8-10 years in cybersecurity or information security
• Background in FinTech, payments, SaaS or tech-product business
• Hands-on across product, application and cloud security
• Experience establishing security processes, controls and procedures
• Knowledge of secure SDLC, DevSecOps, APIs, mobile apps and cloud environments
• Understanding of vulnerability mgmt, pentesting and incident response
• Ability to balance security risk with product speed and commercial priorities
• Experience selecting and managing specialists or contractors
• Strong autonomy, accountability and senior-stakeholder communication skills

Responsibilities

• Take end-to-end ownership of information and product security
• Develop and implement security policies, procedures, controls and governance structures
• Create and execute a practical security roadmap aligned with business priorities
• Embed security throughout product development and the software development lifecycle
• Assess and manage risks across cloud infrastructure, applications, APIs and third-party integrations
• Oversee vulnerability management, penetration testing, incident response and security monitoring
• Support regulatory, audit and compliance requirements
• Introduce security automation and AI-enabled agents where appropriate
• Deliver security initiatives while engaging specialist contractors when required
• Stay informed about emerging cyber threats and industry developments
• Represent the company at cybersecurity, FinTech and technology events
• Define the future security-team structure and progress towards leading the function

Skills

Cybersecurity

Information security

DevSecOps

Vulnerability management

Incident response

Cloud security

Security governance

Stakeholder comms

Vendor management

Product security

Job description

Responsibilities

• Take end-to-end ownership of information and product security
• Develop and implement security policies, procedures, controls and governance structures
• Create and execute a practical security roadmap aligned with business priorities
• Embed security throughout product development and the software development lifecycle
• Assess and manage risks across cloud infrastructure, applications, APIs and third-party integrations
• Oversee vulnerability management, penetration testing, incident response and security monitoring
• Support relevant regulatory, audit and compliance requirements
• Introduce security automation and AI-enabled agents where appropriate
• Personally deliver security initiatives while engaging specialist contractors when required
• Stay informed about emerging cyber threats, vulnerabilities and industry developments
• Represent the company at relevant cybersecurity, FinTech and technology events
• Define the future security-team structure and progress towards leading the function

Required experience

• At least 8-10 years of cybersecurity or information-security experience.
• A background within FinTech, payments, digital wallets, SaaS or another technology-product business.
• Strong hands-on experience across product, application and cloud security.
• Experience establishing security processes, controls and procedures from the ground up.
• Knowledge of secure SDLC, DevSecOps, APIs, mobile applications and cloud environments.
• Understanding of vulnerability management, penetration testing and incident response.
• The ability to balance security risk with product speed and commercial priorities.
• Experience selecting and managing specialist vendors or contractors.
• Strong autonomy, accountability and senior-stakeholder communication skills.

Desirable experience

• Experience building security automation or AI-powered security tools and agents.
• Active participation in bug-bounty programmes, responsible disclosure or security research.
• Public speaking or previous representation of a company at industry events.
• Exposure to payments security, PCI DSS, ISO 27001 or financial-services regulation.