Deputy Regional Information Security Officer

About the role

Kraken is seeking a Deputy Regional Information Security Officer for its UAE operations. The role will own ICT security, operational resilience and regulatory compliance across a portfolio of entities, reporting directly to boards and regulators.

Key responsibilities

• Prepare and present security, risk and compliance reports to entity boards and senior committees.
• Conduct risk assessments, control testing and business impact analyses in line with VARA cybersecurity guidelines.
• Maintain and update Business Impact Assessments and Business Continuity Plans, including testing and scenario development.
• Coordinate with Group Security and IT to align UAE regulatory controls with global policies and to support audit evidence collection.
• Act as the primary liaison with VARA and other regulators on ICT security matters, including examinations and licensing interactions.
• Lead incident classification, escalation and regulatory reporting, and support post‑incident reviews.

Required profile

• 7+ years of experience in information security governance, ICT risk management or regulatory compliance within a regulated financial‑services or virtual‑asset environment.
• Direct experience acting as a named regulatory contact and handling examinations, licensing or supervisory interactions.
• Demonstrated ability to build compliance or governance programmes from the ground up.
• Strong project‑management skills and experience working across multiple jurisdictions.

Required skills

• CISSP certification
• CISM certification
• CRISC certification
• CISA certification
• ISO 27001 Lead Implementer certification