Information Security Manager - 1 Year Contract

About the role

Our client, a leading banking organization in the United Arab Emirates, is looking for an experienced Information Security Manager – Governance to lead security, risk, compliance and regulatory initiatives. Reporting to the Head of Information Security, you will shape and maintain the governance framework that protects critical banking and technology assets.

Key responsibilities

• Manage end‑to‑end information security and compliance projects, including UAE IA (NESA) assessments, PCI DSS compliance, SWIFT CSP, vulnerability assessment & penetration testing (VAPT) and regulatory security assessments.
• Develop, maintain and improve information security policies, standards, procedures, guidelines and governance frameworks.
• Conduct security risk assessments, maintain risk registers, define treatment plans and oversee exception management.
• Act as the security lead for cloud transformation, infrastructure, application, digital transformation and enterprise technology projects, ensuring security requirements are integrated throughout the project lifecycle.
• Review project proposals from a security and risk perspective, validate remediation actions from internal and external audits, and track findings to closure.
• Monitor compliance with applicable regulations, standards and contractual obligations, and manage third‑party security assessments and due‑diligence processes.
• Coordinate with IT, business, compliance, audit, risk management, PMO and external stakeholders on security‑related initiatives.

Required profile

• Minimum 10 years of experience in information security, preferably within the banking sector.
• Proven track record in security governance, risk management, compliance and regulatory projects.
• Strong understanding of UAE IA (NESA), PCI DSS, SWIFT CSP and related security frameworks.
• Experience leading cross‑functional security initiatives and managing third‑party risk.

Required skills

• UAE IA NESA
• Security Framework Implementation
• Third‑Party Risk Management
• SWIFT CSP
• Banking Security Controls
• Information Security Policies
• Standards
• Audit Assessment Management
• Project Stakeholder Management
• Cyber Security Risk Management
• Regulatory Compliance
• PCI DSS
• Vulnerability Management
• Information Security Governance