Cyber Risk Governance Lead — Strategy & Compliance

Tawteen; Muscat; On-site; OMR 60,000 - 90,000; Full time

Job summary

Tawteen is seeking a Head of Cyber Risk Governance to lead the Second Line of Defence cyber governance program. You will define enterprise risk methodologies, maintain the Unified Control Library, and ensure alignment with regulatory requirements.

This role oversees risk appetite, policy ownership, and governance forums at a senior level. Ideal candidates have extensive experience in cyber risk governance within financial services, strong regulator engagement history, and a Bachelor’s degree in

Qualifications

• 15+ years in cyber/technology risk governance within financial services.
• Experience in non-financial risk management and regulatory compliance.
• Track record engaging with regulators.
• Experience establishing governance structures and committees.

Responsibilities

• Defines and maintains risk frameworks, service risk taxonomy, and methodologies.
• Oversees cyber risk appetite, tolerances, and breach handling.
• Owns policy creation, approval, and exception management frameworks.
• Manages UCL governance and related policy frameworks.
• Performs horizon scanning and monitors regulatory changes.
• Monitors compensating controls and escalates high-risk issues.
• Supports risk committees and governance services scheduling.
• Provides methodology and tooling enablement for 1LOD risk assessments.
• Facilitates control objective clinics to align 1LOD–5LOD understanding.
• Ensures QA for 2LOD activities.

Skills

Cyber risk governance

Policy development

Security management

Regulatory engagement

Governance & committee facilitation

Education

Bachelor's degree in Information Technology / Computer Science

CISA certification

CISSP or CISM advantageous

Knowledge of ISO 27001 and NIST CSF

Tools

ISO 27001

NIST CSF

Job description

Tawteen is seeking a Head of Cyber Risk Governance to lead the Second Line of Defence cyber governance program. You will define enterprise risk methodologies, maintain the Unified Control Library, and ensure alignment with regulatory requirements.

This role oversees risk appetite, policy ownership, and governance forums at a senior level. Ideal candidates have extensive experience in cyber risk governance within financial services, strong regulator engagement history, and a Bachelor’s degree in