Assistant Manager, Cyber Organization Alignment & Compliance

About the role

The Assistant Manager, Cyber Organization Alignment & Compliance will ensure that Mashreq’s information security practices are fully aligned with the bank’s risk management strategy, regulatory requirements, and governance frameworks. This role drives the implementation of GRC initiatives to strengthen the security posture while supporting business objectives.

Key responsibilities

• Maintain compliance with internal policies, regulatory standards, and industry frameworks.
• Identify, assess, and manage information security risks in collaboration with business units.
• Perform risk trend analysis, reporting, and continuous improvement of risk processes.
• Develop and manage a comprehensive policy‑exception process, including documentation, approval workflows, and compensating controls.
• Monitor and review granted exceptions to ensure ongoing compliance.
• Maintain and regularly update the ISG service catalog and monitor service performance against SLAs and KPIs.

Required profile

• Minimum 6–8 years of professional experience, including 4–6 years dedicated to Information Security GRC.
• Strong familiarity with security technologies, risk, threat, and vulnerability assessments.
• UAE national citizenship (as specified).

Required skills

• Risk tracking
• Security tools and technologies
• CISA certification
• Governance frameworks
• Risk trend analysis
• Compliance monitoring
• PDPL
• NIST
• CISSP certification
• CRISC certification
• GDPR
• RCSA
• ISO 27001
• CISM certification