Senior Technical Assurance & Cyber Risk Lead

ADIB - Abu Dhabi Islamic Bank; Abu Dhabi; On-site; AED 260,000 - 380,000; Full time

Job summary

ADIB - Abu Dhabi Islamic Bank in Abu Dhabi seeks a Technical Assurance Manager to lead second-line security assurance across infrastructure, apps, cloud and networks. You own the assurance plan, evidence-based risk ratings and remediation validation while coordinating with risk, compliance and internal audit teams.

Responsibilities include testing control design and operating effectiveness, driving remedial actions, and overseeing threat-informed Red Team exercises to ensure cyber resilience and

Qualifications

• Must have deep expertise in second-line technical assurance and evidence-based assessment across infrastructure, applications, databases, cloud, networks and security platforms.
• Strong knowledge of control design and operating-effectiveness assessment.
• Working knowledge of major information security, cybersecurity and regulatory control frameworks.

Responsibilities

• Develop and execute a risk-based annual assurance plan covering critical services, technologies, controls and relevant third parties.
• Independently test control design, implementation, compliance and operating effectiveness using evidence-based methods.
• Own assurance methodologies, test scripts, sampling and evidence standards, aligned with NIST, ISO 27001, PCI DSS, SWIFT CSCF, UAE and CBUAE requirements.
• Coordinate with Cyber Defense, Technology, Risk, Compliance, Internal Audit and control owners while preserving second-line independence.

Skills

Second-line assurance

Evidence-based assessment

Regulatory frameworks

Risk assessment

Education

Bachelor's or Master's in information security

Tools

NIST SP 800-53A

ISO 27001

PCI DSS

Job description

ADIB - Abu Dhabi Islamic Bank in Abu Dhabi seeks a Technical Assurance Manager to lead second-line security assurance across infrastructure, apps, cloud and networks. You own the assurance plan, evidence-based risk ratings and remediation validation while coordinating with risk, compliance and internal audit teams.

Responsibilities include testing control design and operating effectiveness, driving remedial actions, and overseeing threat-informed Red Team exercises to ensure cyber resilience and