InfoSec Governance & Compliance Lead

Commercial Bank of Dubai; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

Commercial Bank of Dubai is seeking an Information Security Governance & Compliance professional to lead the design and ongoing improvement of the bank's information security governance framework. You will monitor policy adherence and drive risk-based decision making.

The role requires 5–7 years of experience, CISSP/CISM or similar, and a deep understanding of ISO 27001, NIST, PCI-DSS, UAE regulations. You will coordinate audits, manage risk registers, and deliver management reporting to protect

Qualifications

• Minimum 5–7 years of information security governance and compliance experience.
• Experience in audit coordination, control testing, and remediation tracking.
• Strong understanding of ISO 27001, NIST, PCI-DSS, and UAE regulatory requirements.
• Ability to design and implement security policies, standards, and metrics.

Responsibilities

• Design and enhance an information security governance framework aligned with regulatory obligations.
• Develop dashboards and reporting on control effectiveness and risk posture.
• Lead policy development, reviews, and enforcement across the bank.
• Drive security awareness programs and training.
• Oversee third-party security governance and supplier risk.
• Coordinate audit activities and regulatory deliverables.

Skills

Information security governance

Risk management

Regulatory compliance

Audit coordination

Threat modelling

Policy management

Security controls

Stakeholder engagement

Education

Bachelor’s degree in Information Security / Cybersecurity / IT

CISSP / CISM / CISA / CRISC / ISO 27001 Lead Implementer Lead Auditor

Tools

ISO 27001

NIST

PCI-DSS

UAE regulatory requirements (NESA / UAE IA)

SWIFT CSP

Job description

Commercial Bank of Dubai is seeking an Information Security Governance & Compliance professional to lead the design and ongoing improvement of the bank's information security governance framework. You will monitor policy adherence and drive risk-based decision making.

The role requires 5–7 years of experience, CISSP/CISM or similar, and a deep understanding of ISO 27001, NIST, PCI-DSS, UAE regulations. You will coordinate audits, manage risk registers, and deliver management reporting to protect