Manager, SOC Governance & Regulatory Compliance - Risk

United Arab Bank; Sharjah; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading bank in the UAE is seeking a SOC Governance Specialist to enhance its cyber resilience by implementing governance frameworks and ensuring compliance with industry standards. The ideal candidate will have extensive experience in SOC governance and incident response, contributing to a robust security operations center.

Qualifications

• Knowledge on industry leading security standards (ISO 27001, NESA, NIST, PCI DSS).
• 7+ years of experience in SOC governance, risk management, and compliance.
• SOC Analyst or Security Operations certifications are preferred.

Responsibilities

• Implement frameworks for continuous improvement of Security Operations.
• Ensure SOC activities comply with applicable laws, regulations, and standards.
• Monitor Cyber Hygiene periodically and coordinate remediation efforts.

Skills

Incident Response

Threat Detection

Governance

Cyber Security Policy Management

Continuous Improvement

Education

Bachelor’s degree in Computer Science or Information Systems

Tools

SIEM

XDR

EDR

Job description

Job Purpose

A Security Operations Center (SOC) plays a crucial role in enhancing cyber resilience. It serves as the central hub for monitoring, detecting, and responding to cyber threats in real-time.

The SOC Governance Specialist will play a pivotal role in defining and implementing governance frameworks that ensure the SOC operates efficiently and complies with industry standards, regulatory requirements, and the best practices. The ideal candidate will have a strong understanding of security policies, governance, incident response, as well as experience in monitoring and continuous improvement of SOC processes.

Principal Accountabilities

• Understanding of SOC-CMM, CREST, MITRE and similar standard and frameworks
• Implement frameworks for continuous improvement of Security Operations
• Plan future SOC needs, addressing people, process and technology requirements
• Prioritize SOC activities based on the risk profile
• Monitor Cyber Hygiene on a periodic basis and co-ordinate remediation effort
• Ensure SOC activities comply with applicable laws, regulations, and standards
• Track SOC performance metrics, such as incident response times, to assess the effectiveness of operations
• Proven expertise in threat detection and prevention, attack kill chain, and incident response (IR) process
• Ensure timely and accurate reporting of incidents to all stakeholders
• Cyber Security policy and process management
• Coordinate with Internal/external auditors and regulators
• Point of contact for audit and compliance assessments

Qualifications & Experience

• Bachelor’s degree in computer science, Information Systems, or equivalent education
• knowledge on industry leading security standards and frameworks (e.g., ISO 27001, NESA, NIST, PCI DSS, etc.,)
• SOC Analyst, Security Operations certifications or equivalent are preferred
• 7+ years of experience in SOC governance, risk management, and compliance.
• Experience in SOC tools (e.g., SIEM, XDR, EDR,).
• Hands-on experience managing security Incidents