Cyber Security Governance & Advisory

About the role

ADCB's Group Risk Management area is responsible for implementing the bank's risk objectives, strengthening the risk framework and fostering a clear risk culture. This cybersecurity governance and advisory role leads the development and implementation of cybersecurity governance frameworks, policies, standards and procedures aligned with global standards and UAE banking regulations.

Key responsibilities

• Lead the development and implementation of cybersecurity governance frameworks, policies, standards and procedures aligned with global standards and UAE banking regulations.
• Formulate and implement strategic plans for cybersecurity governance aligned with the bank's goals and industry best practices.
• Establish and enforce cybersecurity policies, standards and procedures, and review and maintain knowledge of UAE banking and cybersecurity regulations to support audits and compliance checks.
• Conduct risk assessments, identify threats and vulnerabilities, develop mitigation strategies and oversee risk management processes including monitoring and reporting of risk posture.
• Develop and implement incident response plans, crisis management plans and procedures.
• Implement and manage governance monitoring tools and processes, and prepare regular reports for senior management and regulatory bodies.
• Work with internal and external stakeholders, including regulators, and stay updated on cybersecurity trends and threats to recommend improvements to bank guidelines.

Required profile

• At least 8 years of experience in cybersecurity governance roles, preferably in banking or a similar regulated environment.
• Bachelor's degree in IT or Computer Science.
• Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM); at least one of them is required.
• ISO 27001:2022 Lead Implementer or Lead Auditor certification.

Required skills

• Cybersecurity governance frameworks (e.g., ISO/IEC 27001, NIST CSF)
• UAE-specific regulations (UAE IA Standards, Central Bank of the UAE Rulebook, Open Finance)
• Policy development and compliance, risk management and risk assessment, incident response, governance monitoring and reporting, strategic planning and leadership
• Strong analytical, communication and collaboration skills, and in-depth understanding of cybersecurity principles

What we offer

• Competitive salary and eligibility for a variable pay plan.
• Medical insurance, group life and personal accident insurance, paid leave and leave airfare, loan and finance facility preferential rates, staff discounts and children's education assistance (for certain job levels).
• Flexible and remote working options, subject to eligibility and job requirements.
• Learning opportunities including instructor-led courses, e-learning, on-the-job training and professional development programs.