Chief Information Security Officer (CISO)

About the role

A long-established, globally regulated financial services group with operations across the UAE, Europe, Asia and beyond is looking for a Chief Information Security Officer. The group covers multi-asset brokerage (FX, CFDs, commodities, equities), payments and digital asset platforms. As it scales its technology, trading infrastructure and digital asset offerings, cybersecurity has become a top executive priority. The CISO leads the group's global cybersecurity strategy, protecting trading platforms, payment infrastructure, client data and digital assets across many jurisdictions.

Key responsibilities

• Define and execute the group-wide information security and cybersecurity strategy aligned with business growth and regulatory requirements.
• Establish and oversee security governance frameworks, policies and controls across all entities and jurisdictions.
• Lead threat detection, incident response and cyber risk management, especially for trading systems and digital platforms.
• Ensure the security of trading infrastructure, including low-latency systems, APIs and client-facing platforms.
• Oversee cloud, network and application security across distributed environments.
• Work with Technology, Product, Compliance, Risk and Operations to embed security in all systems and processes.
• Manage SOC operations, penetration testing, vulnerability management and red teaming.
• Ensure compliance with frameworks such as DFSA, FCA, ASIC, MiCA and GDPR, and standards such as ISO 27001 and NIST.
• Lead third-party risk assessments for liquidity providers, PSPs and technology partners.
• Report regularly to senior leadership and the board on cybersecurity posture, risks and incidents.
• Build and lead a high-performing global security team.

Required profile

• Proven experience as a CISO, Head of Information Security or equivalent leadership role.
• Strong background in financial services, brokerage (FX/CFDs), fintech, payments or digital assets/crypto.
• Deep understanding of trading platforms, financial systems and real-time infrastructure risks.
• Experience in multi-jurisdictional, regulated environments.
• Hands-on experience managing security incidents, breaches and crisis response.
• Ability to work at both strategic and technical levels, with strong stakeholder management and experience engaging C-level executives and regulators.

Required skills

• Cybersecurity frameworks (ISO 27001, NIST, CIS).
• Cloud environments (AWS, Azure, GCP) and modern security architectures.
• Relevant certifications preferred (CISSP, CISM, CISA or similar).