Information Security Manager

Durlston Partners LLP; United Arab Emirates; On-site; AED 734,000 - 771,000; Full time

Job summary

Durlston Partners LLP is seeking an experienced Information Security Lead for Governance, Risk, and Compliance (GRC) & Assurance in a global fund context. The role focuses on ISO 27001 certification, ISMS management, and security assurance across a cloud-based environment.

The successful candidate will own SOC 2 programmes, coordinate with external auditors, and drive remediation of findings. A strong background in financial services or FinTech is essential to operate with senior stakeholders

Qualifications

• Significant experience in Information Security, GRC, Security Assurance or IT Audit.
• Strong ownership of ISO 27001 certification and audits.
• Experience leading SOC 2 Type I / Type II programmes.

Responsibilities

• Own ISO 27001 certification and ISMS, audits, and continual improvement.
• Lead SOC 2 activities with external auditors (Type I & II).
• Oversee security controls, evidence, findings, and remediation to closure.
• Provide assurance across a modern cloud-based environment and support governance.
• Collaborate with senior security leadership and technical teams.
• Help scale and enhance the organisation's GRC and assurance capabilities.

Skills

ISO 27001

SOC 2

GRC

Information Security

Job description

Information Security Lead - Governance, Risk, and Compliance (GRC) & Assurance - Global Fund

Location: UAE

Salary: Up to USD 200-210k base + strong performance-related bonus + excellent benefits

We are partnered with a Global Top Tier Fund seeking an experienced Information Security professional to take ownership of its GRC and Security Assurance function.

This is a senior, hands-on position for someone with a strong background in financial services or FinTech, particularly around ISO 27001 certification, security audits and broader assurance programmes.

The role will focus on:

• Owning the organisation's ISO 27001 certification and ISMS, including audits, ongoing certification requirements and continual improvement.
• Leading SOC 2 activities and working directly with external auditors across Type I and Type II examinations.
• Overseeing security controls, audit evidence, findings and remediation through to completion.
• Providing assurance across a modern, cloud-based technology environment and supporting ongoing security governance.
• Working closely with senior security leadership and technical teams across the organisation.
• Helping develop and improve the organisation's wider GRC and assurance capabilities as it continues to scale.

We are looking for:

• Significant experience across Information Security, GRC, Security Assurance or IT Audit.
• Strong, demonstrable ownership of ISO 27001 certification and audits.
• Experience leading or managing SOC 2 Type I / Type II programmes.
• A background within Finance or FinTech is essential, ideally across asset management, investment management, trading, banking, payments or another regulated financial environment.
• Strong understanding of security controls, audit processes, evidence and remediation.
• The ability to operate comfortably with both senior stakeholders and technical teams.
• Experience with cloud environments and GRC/assurance tooling is advantageous.

AI governance/ISO 42001 experience would be a plus.