Chief Information Security Officer (CISO)

About the role

Fortis, a fast‑growing fintech operating across the MENA region, is seeking a Chief Information Security Officer to lead its information security function in the UAE. You will act as the designated Information Security Officer for the Central Bank of the UAE (CBUAE) licence process and ensure the organisation meets the highest security and regulatory standards.

Key responsibilities

• Serve as the Information Security Officer for CBUAE, complete Fit & Proper assessments, prepare and maintain the full documentation package, and liaise with regulators during inspections.
• Maintain the information security risk register, close gaps against PCI DSS, PCI PIN and CBUAE requirements, and coordinate internal and external audits.
• Adapt global security policies to UAE requirements, oversee local implementation, and participate in architecture reviews, infrastructure changes and new product launches.
• Lead incident management, act as the primary contact for security incidents, notify CBUAE when required, conduct post‑mortems and drive corrective actions.
• Run the security awareness programme for the local team, align with global initiatives and report on security KPIs and compliance status.

Required profile

• UAE resident, available for full‑time permanent employment.
• 3+ years (5+ preferred) of experience in information security within fintech, banking, PSP or other regulated financial organisations.
• Proven ability to prepare policies, procedures and audit evidence packages and to represent the company before regulators and auditors.
• Experience working autonomously in matrix structures and collaborating with global teams.

Required skills

• Strong knowledge of PCI DSS (mandatory) and PCI PIN standards.
• Experience with CBUAE regulatory requirements and high‑compliance environments.
• Information security risk management and audit coordination.
• Incident management and security awareness programme development.