Cyber Governance, Risk & Compliance Manager (UAE National)

About the role

This position leads technical cyber risk assessments and regulatory certification activities across enterprise and industrial environments, ensuring that risks are based on verified technical evidence and compliance requirements are demonstrably met.

Key responsibilities

• Lead technical cyber risk assessments across systems, architectures, changes and third parties, translating exposure into clear, actionable risk positions.
• Map technical controls against UAE Information Assurance Standards and other applicable regulatory requirements, identifying gaps and driving remediation.
• Own and maintain robust evidence for certifications including ISO/IEC 27001, supporting internal and external audits and regulatory assessments.
• Design and execute control testing through configuration reviews, sampling and technical validation to ensure controls operate effectively.
• Maintain an accurate cyber risk register and communicate risk and compliance positions clearly to key stakeholders.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related technical discipline.
• Minimum 6 years' experience across cyber risk, compliance or security assurance, including hands‑on technical assessment.
• Direct experience with UAE Information Assurance Standards or a comparable national framework, alongside experience supporting external certification audits.
• Strong knowledge of ISO/IEC 27001, NIST Cybersecurity Framework and technical security controls spanning identity, network, endpoint, cloud, applications and data.
• CRISC, CISA, CISM, ISO/IEC 27001 Lead Auditor or Lead Implementer certification would be highly advantageous.

Required skills

• UAE Information Assurance Standards
• ISO/IEC 27001
• NIST Cybersecurity Framework
• Technical security controls (identity, network, endpoint, cloud, applications, data)

What we offer

• High‑impact role with ownership across cyber risk and regulatory compliance.
• Exposure to complex enterprise and industrial technology environments.
• Opportunity to influence security assurance within a major UAE organisation.