Information Security Manager - Governance (1-Year Contract)

Tanqeeb; Abu Dhabi; On-site; AED 469,000 - 737,000; Full time

Benefits offered by this job

UAE work visa

Emirates ID

Medical insurance

End-of-Service benefits

Job summary

Capitex is recruiting an Information Security Manager - Governance for a one-year, on-site assignment with a leading UAE bank in Dubai. You will drive security strategy, oversee governance, risk, and regulatory compliance, and lead initiatives across technology, cloud, and infrastructure to protect critical assets.

The role requires extensive banking security experience, hands-on UAE IA/NESA, PCI DSS, SWIFT CSP, and VAPT expertise, plus the ability to coordinate with multiple stakeholders.

Qualifications

• Extensive information security experience in the banking/financial sector.
• Approximately 10–12 years in information/cyber security with manager responsibilities.
• Strong governance/GRC experience covering policies, risk assessments, risk registers and compliance.
• Hands-on UAE IA/NESA implementation, assessments and policy alignment.
• Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory/security assessments.
• Proven track record closing audit/regulatory findings.
• Ability to lead information security on major technology, cloud, and infrastructure projects.
• CISM, CRISC, CISA and/or CISSP preferred.
• Bachelor's degree.
• Strong communication with senior non-technical stakeholders.

Responsibilities

• Assist in developing information security strategy and roadmap across security domains.
• Manage end-to-end security projects including UAE IA assessments, PCI DSS, SWIFT CSP, and VAPT.
• Validate closure of gaps from regulatory assessments and audits.
• Act as information security lead for technology, digital transformation, cloud, infrastructure, applications, and business projects.
• Manage multiple security and compliance projects prioritised by risk and business impact.
• Ensure security requirements are integrated into project lifecycle.
• Coordinate with PMO and business managers to embed security activities into plans.
• Maintain security governance frameworks—policies, standards, risk assessments, risk registers and risk acceptance.
• Manage audit and regulatory findings remediation.
• Establish third-party due diligence and onboarding risk processes.
• Develop and deliver security awareness and training.

Skills

Information security management

GRC governance

Regulatory compliance

Stakeholder communication

Project management

Education

Bachelor's degree

Tools

UAE IA/NESA

PCI DSS

SWIFT CSP

VAPT

Job description

Job description

Capitex is engaging an Information Security Manager - Governance for a one-year contract with a leading UAE bank, based on-site in Dubai.

Working directly under the Head of Information Security, you will develop and implement the security measures that keep the bank's information assets safe - identifying gaps in existing IS policies, standards, guidelines and procedures, and bringing them into alignment with regulatory requirements and industry standards.

Key responsibilities

• Assist in the development of the information security strategy and roadmap across all security technology domains
• Manage end-to-end security projects including UAE IA (NESA) assessments, PCI DSS, SWIFT CSP controls and VAPT
• Verify and validate closure of gaps identified during regulatory assessments and audits, recommending alternative solutions where needed
• Act as the Information Security lead for technology, digital transformation, cloud, infrastructure, application and business projects
• Manage multiple security and compliance projects simultaneously, prioritising by business impact and risk
• Ensure information security requirements are addressed through project initiation, planning, design, implementation, testing and go-live
• Coordinate with PMO and business project managers to integrate security activities into project plans
• Maintain security governance frameworks - policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance
• Manage audit and regulatory findings through remediation and validated closure
• Establish risk-based processes for third-party due diligence, onboarding, assessment, monitoring and offboarding
• Manage the development and delivery of security awareness and training programmes
• Advise IS management on information security risk issues in support of the bank's wider risk management programmes

One-year contract with a leading UAE bank, on-site in Dubai Competitive all-inclusive monthly package - salary, UAE visa, Emirates ID and medical insurance all covered Full Employer of Record support throughout the engagement, with end-of-service benefits accrued per UAE labour law

Requirements

• Strong information security experience within the banking/financial sector - essential, given exposure to banking systems, regulatory requirements and volume of concurrent activities
• Around 10-12 years of relevant information/cyber security experience with manager-level responsibilities
• Strong information security governance/GRC experience covering policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance
• Hands-on experience with UAE IA/NESA - implementation, assessments and policy/control alignment
• Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory/security assessments
• Proven experience managing audit/regulatory findings through remediation and validated closure
• Experience acting as information security lead on major technology, digital, cloud, infrastructure and application projects
• Ability to manage multiple security/regulatory projects simultaneously, coordinating with IT, Business, Risk, Audit, Compliance, PMO and external parties
• Professional certification: CISM, CRISC, CISA and/or CISSP preferred
• Bachelor's degree
• Strong communication skills - able to engage senior non-technical stakeholders without technical language