Technical Assurance Manager

About the role

Lead ADIB’s second‑line technical security assurance across infrastructure, applications, databases, cloud, networks, security platforms and critical business services. The role owns the risk‑based Technical Assurance Plan and provides evidence‑based conclusions on control design, implementation, compliance and operating effectiveness.

Key responsibilities

• Develop and execute an annual risk‑based assurance plan covering critical services, technologies, controls and third‑party providers.
• Independently test control design, implementation, compliance and operating effectiveness using evidence‑based methods aligned with NIST, ISO 27001, PCI DSS, SWIFT CSCF and UAE regulatory requirements.
• Operate assurance tools, expand automated or continuous monitoring, and assess findings against the Enterprise Risk Framework.
• Lead technical regulatory assurance, Red‑Team exercises and cyber‑resilience validation, including AI/ML security assessments.
• Own the finding lifecycle from evidence validation and risk rating through escalation, independent retesting and closure.

Required profile

• Deep expertise in second‑line technical assurance across infrastructure, applications, databases, cloud, networks and security platforms.
• Strong knowledge of control design, operating‑effectiveness assessment and major security frameworks.
• Bachelor’s or master’s degree in information security, cybersecurity, engineering, computer science or a related discipline.
• Relevant certifications such as CISA, CISSP, CRISC, CISM, OSCP, GPEN, GIAC or PCI ISA/QSA are preferred.

Required skills

• Infrastructure, applications, databases, cloud, network and security‑platform assessment.
• NIST SP 800‑53A, NIST SP 800‑115, ISO 27001, PCI DSS, SWIFT CSCF, UAE Information Assurance, CBUAE.
• Penetration testing, vulnerability assessment, Red/Purple Team methods, MITRE ATT&CK, OWASP, PTES, CIS Benchmarks.
• IAM/PAM, SIEM/SOC, DLP, cryptography, certificate management, CSPM/CASB, WAF, DDoS mitigation, endpoint security.
• Automation, continuous compliance monitoring, technical telemetry and security‑platform data analysis.