Information Security Manager - Governance (1-Year Contract)

Capitex; Sharjah; On-site; AED 300,000 - 540,000; Full time

Benefits offered by this job

UAE visa and Emirates ID

Medical insurance

End-of-service benefits

On-site in Dubai

Job summary

Capitex is seeking an Information Security Manager – Governance for a one-year, on-site engagement with a leading UAE bank, based in Dubai. The role focuses on developing and enforcing security governance, policies, and regulatory alignment across technology, cloud, and infrastructure.

The candidate will lead end-to-end security projects, address gaps from audits, and collaborate with PMO and business units to integrate security into programs.

Qualifications

• Experience in information security governance, risk assessments, and policy alignment.
• Proven track record in banking/financial sector security projects and regulatory audits.
• Strong communication with senior stakeholders and cross-functional teams.

Responsibilities

• Assist in developing the information security strategy and roadmap across security domains.
• Manage end-to-end security projects including UAE IA (NESA) assessments, PCI DSS, SWIFT CSP, and VAPT.
• Validate closure of regulatory gaps and propose remediation where needed.
• Act as information security lead for technology, cloud, infrastructure, and applications projects.
• Coordinate security activities within project plans and with PMO.

Skills

Governance & Risk

Banking sector experience

Stakeholder communication

Regulatory compliance

Security project management

Education

Bachelor's degree

Tools

PCI DSS

SWIFT CSP

VAPT

Job description

Capitex is engaging an Information Security Manager - Governance for a one-year contract with a leading UAE bank, based on-site in Dubai.

Working directly under the Head of Information Security, you will develop and implement the security measures that keep the bank's information assets safe - identifying gaps in existing IS policies, standards, guidelines and procedures, and bringing them into alignment with regulatory requirements and industry standards.

Key responsibilities:

• Assist in the development of the information security strategy and roadmap across all security technology domains
• Manage end-to-end security projects including UAE IA (NESA) assessments, PCI DSS, SWIFT CSP controls and VAPT
• Verify and validate closure of gaps identified during regulatory assessments and audits, recommending alternative solutions where needed
• Act as the Information Security lead for technology, digital transformation, cloud, infrastructure, application and business projects
• Manage multiple security and compliance projects simultaneously, prioritising by business impact and risk
• Ensure information security requirements are addressed through project initiation, planning, design, implementation, testing and go-live
• Coordinate with PMO and business project managers to integrate security activities into project plans
• Maintain security governance frameworks - policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance
• Manage audit and regulatory findings through remediation and validated closure
• Establish risk-based processes for third-party due diligence, onboarding, assessment, monitoring and offboarding
• Manage the development and delivery of security awareness and training programmes
• Advise IS management on information security risk issues in support of the bank's wider risk management programmes

Strong information security experience within the banking/financial sector - essential, given exposure to banking systems, regulatory requirements and volume of concurrent activities

Around 10-12 years of relevant information/cyber security experience with manager-level responsibilities

Strong information security governance/GRC experience covering policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance

Hands-on experience with UAE IA/NESA - implementation, assessments and policy/control alignment

Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory/security assessments

Proven experience managing audit/regulatory findings through remediation and validated closure

Experience acting as information security lead on major technology, digital, cloud, infrastructure and application projects

Ability to manage multiple security/regulatory projects simultaneously, coordinating with IT, Business, Risk, Audit, Compliance, PMO and external parties

Professional certification: CISM, CRISC, CISA and/or CISSP preferred

Bachelor's degree

Strong communication skills - able to engage senior non-technical stakeholders without technical language

One-year contract with a leading UAE bank, on-site in Dubai

Competitive all-inclusive monthly package - salary, UAE visa, Emirates ID and medical insurance all covered

Full Employer of Record support throughout the engagement, with end-of-service benefits accrued per UAE labour law