Senior Cyber DevSecOps Lead - 4-Stream Squad & Governance

Dicetek LLC

Dubai

On-site

AED 558,000 - 1,004,000

Full time

4 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Dicetek LLC in Dubai seeks a senior Cybersecurity Engineer to lead DevSecOps with responsibility for AppSec, AI governance, continuous security validation and compliance trails. You will consolidate the tooling stack (SonarQube, Snyk, DefectDojo, Power BI, Defender for Cloud, AWS Security Hub) and chair the Security Champions Guild, aligning 1LoD with 2LoD and AI CoE for regulatory readiness.

Banking or regulated-industry experience is essential, including hands‑on delivery against CBUAE

Qualifications

CISSP (mandatory)
CCSP or AWS Certified Security – Specialty or Azure Security Engineer Associate
CISM or ISO/IEC 42001 Lead Implementer
CDP or equivalent

Responsibilities

Operate a squad's 4-workstream delivery (AppSec / AI Governance / Continuous Security Validation / Compliance Trail) against 2LoD approved policies, with measurable SLA adherence and CBUAE inspection-readiness.
Own the consolidated tooling stack (e.g. SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub) — vendor consolidation, integration architecture, and DefectDojo→Attestation→Power BI evidence chain.
Act as 1LoD counterpart to 2LoD and AI CoE — chairing the Security Champions Guild, arbitrating cross-workstream priorities, and presenting the monthly DevSecOps Governance Dashboard to 2LoD. in cybersecurity engineering with proven leadership across DevSecOps, cloud security (Azure + AWS), and AI/LLM security. Banking or regulated-industry experience essential, including hands‑on delivery against CBUAE (Decree-Law 6/2025, Enabling Technologies Guidelines, AI/ML Guidance Note), NIST AI RMF and ISO/IEC 42001. Demonstrated experience operating within a 3‑Lines‑of‑Defense model — implementing controls in 1LoD while engaging credibly with 2LoD on policy, assurance and independent testing.