Information Security Manager – NESA Banking

About the role

We are seeking an experienced Information Security Manager to lead NESA‑related security initiatives for our banking operations in the UAE. The role involves shaping security policies, ensuring regulatory compliance, and guiding cross‑functional teams through complex projects.

Key responsibilities

• Lead implementation and assessment of UAE IA/NESA requirements across banking systems.
• Develop and maintain information security policies, standards, and governance frameworks aligned with NESA.
• Manage security governance, risk assessments, risk registers, and compliance reporting.
• Oversee PCI DSS, SWIFT CSP, VAPT and other regulatory security assessments.
• Coordinate remediation of audit and regulatory findings and ensure validated closure.
• Act as security lead for major technology, digital, cloud, infrastructure and application projects.
• Collaborate with IT, Risk, Audit, Compliance, PMO and external parties to deliver security projects.

Required profile

• Bachelor’s degree in a relevant field.
• 10–12 years of information/cyber security experience, preferably in banking/financial services.
• Professional certifications such as CISM, CRISC, CISA and/or CISSP.

Required skills

• Information security governance and GRC.
• Risk assessment and risk register management.
• NESA (UAE IA) compliance and policy alignment.
• PCI DSS and SWIFT CSP compliance.
• Vulnerability assessment and penetration testing (VAPT).
• Cloud and infrastructure security.