Sr Information Security Governance & Assurance Manager

Client of Michael Page; United Arab Emirates; On-site; AED 350,000 - 520,000; Full time

Job summary

Client of Michael Page is seeking a senior Information Security professional to lead governance, risk and compliance across ISO 27001 and SOC 2 readiness. You will own the ISMS, coordinate audits, and drive remediation with engineering and product teams in a fintech/regulatory environment.

The role requires 10+ years in information security or risk, with five+ years in GRC or assurance, and relevant certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISA or CISSP desirable.

Qualifications

• 10+ years in information security, risk, or related disciplines.
• Minimum 5+ years in security GRC or assurance.
• Experience leading ISO 27001 certification and ISMS operations.
• Experience with SOC 2 Type I/II readiness and examinations.

Responsibilities

• Lead day-to-day security governance certification and assurance programme.
• Own ISMS including ISO 27001 surveillance, recertification and continual improvement.
• Lead SOC 2 readiness, evidence management, and auditor coordination.
• Coordinate audits, due diligence, security questionnaires, and assurance requests.
• Improve assurance activities through automation and governance tooling.

Skills

Security governance

Audit coordination

GRC & assurance

Cloud security

Tools

GRC tooling

Job description

About Our Client

A growing FS organisation in the Middle East

Job Description

Lead the day-to-day security governance certification and assurance programme Own the ISMS including ISO 27001 certification surveillance recertification and continual improvement Lead SOC 2 Type I II readiness and examination activities including control mapping evidence management and auditor coordination Build and maintain security control frameworks policies evidence programmes and remediation processes Work directly with engineering product and operational teams to implement and improve security controls Perform control testing identify deficiencies and drive remediation through to verified closure Coordinate external audits due diligence security questionnaires and assurance requests Develop clear reporting on certification status control effectiveness findings exceptions and remediation Improve assurance activities through automation reusable evidence continuous monitoring and appropriate GRC tooling

The Successful Applicant

At least 10 years experience across information security security assurance technology risk or a related discipline including a minimum of five years in security GRC or assurance Experience in fintech payments digital banking investment financial services or another regulated environment Direct experience leading ISO 27001 certification and operating an ISMS Direct experience leading SOC 2 Type I and or Type II readiness and examinations A track record of personally implementing controls building evidence programmes and driving audits and remediation to successful outcomes Experience working closely with engineering cloud and product teams in cloud environments Practical experience supporting external audits client diligence and customer security assessments Tangible experience in AI governance AI risks or security assurance Relevant qualifications such as ISO 27001 Lead Implementer or Lead Auditor CISA CRISC CISM or CISSP would be advantageous At least 10 years' experience across information security, security assurance, technology risk or a related discipline, including a minimum of five years in security GRC or assurance. Experience in fintech, payments, digital banking, investment, financial services or another regulated environment. Direct experience leading ISO 27001 certification and operating an ISMS. Direct experience leading SOC 2 Type I and/or Type II readiness and examinations. A track record of personally implementing controls, building evidence programmes and driving audits and remediation to successful outcomes. Experience working closely with engineering, cloud and product teams in cloud environments. Practical experience supporting external audits, client diligence and customer security assessments. Tangible experience in AI governance, AI risks or security assurance. Relevant qualifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or CISSP would be advantageous.