Senior Security Analyst – Banking Compliance

About the role

The Senior Security Analyst will lead a comprehensive banking security compliance program in Dubai, overseeing gap and risk assessments, ISO/IEC 27001 implementation, internal audits, corrective actions and preparation for certification. The role bridges technical security controls with executive reporting, ensuring regulatory alignment across the organization.

Key responsibilities

• Own and drive end‑to‑end banking security compliance, including gap assessment, scope definition and risk treatment.
• Develop and maintain the Statement of Applicability, policies, evidence management and internal audit processes.
• Manage corrective‑action plans, management reviews and certification readiness for ISO/IEC 27001 and related frameworks.
• Translate technical risk findings into executive‑level reports and present to audit committees, regulators and senior stakeholders.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field; Master’s preferred.
• ISO/IEC 27001 Lead Auditor certification and at least one of CISA, CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 22301 or PCI DSS.
• 5–8 years of information security experience, with minimum 3 years in security governance, risk, compliance or audit within banking or financial services.
• Professional proficiency in English; Arabic is a plus.

Required skills

• ISO/IEC 27001 Lead Auditor, ISO 22301, NIST CSF, CIS Controls, SWIFT CSP, PCI DSS.
• SIEM/SOC, IAM/MFA/PAM, network and endpoint security, vulnerability management, cloud security (Azure/AWS), DLP, encryption, backup/DR, secure SDLC.
• Experience with Microsoft Sentinel/Defender, GRC platforms, vulnerability scanners and audit/evidence automation tools.