MEA Information Security & Risk Leader

theapexgroup; Cape Town; On-site; ZAR 1,200,000 - 1,800,000; Full time

Job summary

The Apex Group is seeking an Information Security Manager to lead MEA cyber risk, regulatory alignment, and security program governance across GCC and Africa financial institutions. You will coordinate with the Group CISO, regulators, and business heads to implement controls, drive remediation, and ensure alignment with international frameworks.

The role requires extensive experience in ISO 27001, NIST, and cross‑border data protection, with a focus on POPIA, DIFC, PDPL, SAMA CSF, and NCA ECC.

Qualifications

• Min. 10 years in cyber risk/technical risk/compliance in GCC/Africa financial institutions; hands‑on delivery across UAE PDPL, DIFC, SAMA CSF, NCA ECC, POPIA.
• Exceptional communication, presentation, and articulation skills; ability to influence diverse stakeholder groups.
• Good knowledge of cloud and hybrid security models (Azure, AWS, or equivalent).
• Industry certifications advantageous (e.g., CISM/CRISC, ISO 27001 Lead Auditor; cloud security certs.).

Responsibilities

• Security engineering and risk governance across MEA entities.
• Align with cyber strategy and group directives; deliver inputs to risk forums.
• Coordinate with regulators & business heads; provide executive level updates.
• Lead annual RCSA using ISO 31000 principles; drive remediation actions.
• Maintain compliance with NIST CSF 2.0, ISO 27001:2022, COBIT 2019, PCI DSS readiness.

Job description

The Apex Group is seeking an Information Security Manager to lead MEA cyber risk, regulatory alignment, and security program governance across GCC and Africa financial institutions. You will coordinate with the Group CISO, regulators, and business heads to implement controls, drive remediation, and ensure alignment with international frameworks.

The role requires extensive experience in ISO 27001, NIST, and cross‑border data protection, with a focus on POPIA, DIFC, PDPL, SAMA CSF, and NCA ECC.