Senior InfoSec Governance & Assurance Lead

Michael Page; Abu Dhabi; On-site; AED 600,000 - 900,000; Full time

Job summary

Michael Page is seeking a Sr Infosec Governance Manager to lead the day-to-day security governance, certification and assurance programme across a fintech-like environment in the Middle East. You will own and improve the ISMS, including ISO 27001 surveillance, recertification and continual improvement.

You will drive SOC 2 Type I/II readiness, coordinate audits, mapping controls to evidence, and work with engineering, product and operations to strengthen security controls across cloud

Qualifications

• 10+ years in information security, security assurance or risk management.
• Direct experience leading ISO 27001 certification and ISMS operations.
• Experience with SOC 2 Type I/II readiness and auditor coordination.
• Proven ability to implement controls, build evidence programs and drive audits.

Responsibilities

• Lead day-to-day security governance, certification and assurance programme.
• Own ISMS, including ISO 27001 surveillance, recertification and continual improvement.
• Coordinate external audits, due diligence, security questionnaires and assurance requests.
• Develop reporting on certification status, control effectiveness and remediation.
• Collaborate with engineering, product and operations to implement and improve controls.

Skills

ISO 27001

SOC 2 readiness

Audit coordination

Control testing

Tools

GRC tooling

Job description

Michael Page is seeking a Sr Infosec Governance Manager to lead the day-to-day security governance, certification and assurance programme across a fintech-like environment in the Middle East. You will own and improve the ISMS, including ISO 27001 surveillance, recertification and continual improvement.

You will drive SOC 2 Type I/II readiness, coordinate audits, mapping controls to evidence, and work with engineering, product and operations to strengthen security controls across cloud