Information Security Manager – Governance (1‑Year Contract)

About the role

Capitex is seeking an Information Security Manager – Governance for a one‑year contract with a leading UAE bank. Reporting to the Head of Information Security, you will shape and enforce security policies, standards and controls to protect the bank’s information assets.

Key responsibilities

• Assist in developing the information security strategy and roadmap across all technology domains.
• Manage end‑to‑end security projects, including UAE IA (NESA) assessments, PCI DSS, SWIFT CSP controls and VAPT.
• Validate closure of gaps identified during regulatory assessments and audits, proposing alternative solutions where needed.
• Lead security integration for technology, digital transformation, cloud, infrastructure, application and business projects.
• Maintain security governance frameworks – policies, standards, risk assessments, risk registers and compliance documentation.
• Coordinate with PMO and business project managers to embed security activities into project plans.
• Oversee audit and regulatory findings through remediation and validated closure.
• Establish risk‑based processes for third‑party due diligence, onboarding, assessment, monitoring and off‑boarding.
• Develop and deliver security awareness and training programmes.

Required profile

• 10‑12 years of information/cyber security experience in the banking/financial sector.
• Manager‑level responsibilities with strong governance/GRC background.
• Hands‑on experience with UAE IA/NESA implementation and assessments.
• Proven track record managing PCI DSS, SWIFT CSP, VAPT and regulatory assessments.
• Experience leading security for major technology, digital, cloud and infrastructure projects.
• Professional certifications such as CISM, CRISC, CISA and/or CISSP preferred.
• Strong communication skills to engage senior non‑technical stakeholders.

Required skills

• UAE IA/NESA compliance
• PCI DSS
• SWIFT CSP
• VAPT (Vulnerability Assessment & Penetration Testing)
• Risk assessments and risk register management
• Security governance and GRC frameworks
• Audit and regulatory remediation

What we offer

• One‑year contract on‑site in Dubai.
• Competitive all‑inclusive monthly package covering salary, UAE visa, Emirates ID and medical insurance.
• Full Employer of Record support with end‑of‑service benefits accrued per UAE labour law.