Director, Cyber Security Risk Governance

About the role

The Director of Cyber Security Risk Governance leads the development and execution of Etisalat's cyber risk framework, ensuring that critical infrastructure, revenue‑generating services and sensitive data are protected in line with business goals, regulatory mandates and international standards.

Key responsibilities

• Develop, implement and continuously improve the Cyber Security Risk Governance framework, policies and standards (ISO 27001, NIST, etc.).
• Define risk appetite, tolerance levels and governance mechanisms, and oversee risk identification, assessment and prioritisation across Etisalat's critical assets.
• Ensure risk treatment plans, controls and mitigation strategies are defined, implemented and monitored.
• Lead cross‑functional teams to promote a unified risk‑aware culture and translate technical risks into business language for senior leadership.
• Monitor global cyber trends, regulatory changes and report the cyber risk profile to senior management.

Required profile

• BSc in Cyber Security or Computer Engineering with CISSP and CRISC certifications.
• Hands‑on experience creating policies, standards and guidelines for telecom and IT environments.
• Strong communication and presentation skills, capable of influencing senior stakeholders.

Required skills

• Knowledge of telecom standards: ITU, ETSI, ISO, SIA, GSM, 3GPP.
• Familiarity with security technologies: GRC, UTM, IPS/IDS, WAF, SIEM, IAM, PAM, DDoS, AEP, NDR, EDR.
• Expertise in risk assessment, security gap analysis and remediation planning.