Director, Cyber Security Risk Governance

About the role

This senior position is responsible for ensuring that cyber security risks to Etisalat's critical infrastructure, revenue‑generating services and sensitive data are identified, assessed, governed and communicated in line with business objectives, regulatory requirements and international standards.

Key responsibilities

• Develop, implement and continuously enhance the Cyber Security Risk Governance framework, policies and standards aligned with e& business strategy and leading international practices such as ISO 27001 and NIST.
• Establish and maintain risk appetite, tolerance levels and governance mechanisms for cyber security across Etisalat’s critical assets.
• Oversee identification, assessment, analysis and prioritisation of cyber risks and ensure appropriate treatment plans, controls and mitigation strategies are applied.
• Ensure compliance with national telecom regulations, sector‑specific requirements and relevant international standards.
• Lead cross‑functional teams to drive a unified approach to cyber security risk governance and translate complex risks into clear business terms for senior management.
• Present the e& Cyber Security Risk Profile periodically to senior leadership and drive continuous improvement of risk assessment methodologies and reporting.
• Mentor and develop the Cyber Security Risk Governance team and foster a risk‑aware, security‑conscious culture across the organisation.

Required profile

• BSc in Cyber Security or Computer Engineering.
• Professional certifications such as CISSP and CRISC.
• Hands‑on experience developing policies, standards and guidelines for cyber security risk management.
• Strong knowledge of telecom and IT standards (ITU, ETSI, ISO, SIA, GSM, 3GPP).
• Excellent communication and presentation skills.

Required skills

• ISO 27001, NIST frameworks.
• Security OEM technologies and controls: GRC, UTM, IPS/IDS, WAF, SIEM, IAM, PAM, DDoS, AEP, NDR, EDR.