AVP, Technology and Information Security

About the role

DBS Bank Ltd. (DIFC Branch) in Dubai, part of DBS, a leading Asian financial services group, is looking for an AVP to lead branch technology, risk management and information security. The role owns the branch technology risk and information security framework, ensures regulatory compliance and oversees the branch technology team.

Key responsibilities

• Lead branch technology operations and ensure stable, secure and resilient services, including those delivered by Group teams and third parties.
• Own the technology risk and information security framework, including risk identification, control design, monitoring, incidents and escalation.
• Manage the control environment, including control testing, issue tracking and remediation.
• Coordinate compliance with regulatory requirements, including DIFC and DFSA requirements, and oversee audit readiness, remediation and continuous improvement.
• Manage third-party technology and security risk, including due diligence, control assurance and vendor oversight.
• Partner with Group Technology and local stakeholders on initiatives and resolve service, risk and control issues.
• Support audits, regulatory reviews and governance forums through clear reporting and stakeholder engagement.
• Lead, coach and develop the branch technology team.

Required profile

• Bachelor's or master's degree in computer science, technology, cybersecurity or a related field.
• Experience leading a small, high-performing technology team in a hands-on, business-facing environment.
• Proven experience in technology risk management, information security, control oversight and regulatory compliance.
• Experience in a matrix organization with central technology teams, business stakeholders, vendors, auditors and regulators.
• Experience in information security management, vendor risk assessment and control testing.
• Excellent communication and stakeholder management skills across local and geographically dispersed teams.

Required skills

• Working knowledge of relevant frameworks and regulatory requirements, including DFSA Gen Rulebook 5.5 Cyber Risk Management and cross-referenced international standards.
• Strong understanding of technology risk, information security and operational resilience in a regulated environment.
• Relevant certifications such as CISSP, CISM, CISA or equivalent are desirable.