Chief Information Security Officer

About the role

The Chief Information Security Officer will lead the global cybersecurity strategy for a regulated financial services group operating across the UAE, Europe, Asia and beyond. This senior, hands‑on role requires deep experience in financial services, brokerage or crypto environments and the ability to protect trading platforms, payment infrastructure, client data and digital assets.

Key responsibilities

• Define and execute a group‑wide information security and cybersecurity strategy aligned with business growth and regulatory requirements.
• Establish and oversee security governance frameworks, policies and controls across all entities and jurisdictions.
• Lead threat detection, incident response and cyber‑risk management for trading systems and digital platforms.
• Ensure security of low‑latency trading infrastructure, APIs and client‑facing platforms.
• Oversee cloud, network and application security across distributed environments.
• Manage security operations (SOC), penetration testing, vulnerability management and red‑team activities.
• Ensure compliance with global regulations (DFSA, FCA, ASIC, MiCA, GDPR) and standards (ISO 27001, NIST, etc.).
• Conduct third‑party/vendor risk assessments for liquidity providers, PSPs and technology partners.
• Provide regular executive‑level reporting on cybersecurity posture, risks and incidents.

Required profile

• Proven experience as a CISO, Head of Information Security or equivalent senior leadership role.
• Strong background in financial services, brokerage (FX/CFDs), fintech, payments or digital‑asset environments.
• Experience operating in multi‑jurisdictional, regulated environments.
• Relevant certifications preferred (CISSP, CISM, CISA or similar).

Required skills

• Deep knowledge of cybersecurity frameworks such as ISO 27001, NIST and CIS.
• Hands‑on experience with cloud platforms (AWS, Azure, GCP) and modern security architectures.
• Experience managing SOC operations, penetration testing, vulnerability management and red‑team exercises.