Assistant Vice President – Information Security

About the role

The Assistant Vice President – Information Security (AVP) is a cross‑functional leader within Mashreq’s IS GRC function. Reporting to the Head of IS GRC, the AVP designs, embeds and operates core security governance, risk and compliance capabilities, driving a shift‑left risk culture across the bank.

Key responsibilities

• Lead InfoSec risk management orchestration and sustain a consistent risk culture across ISG and stakeholder groups.
• Define and implement the Information Security Risk Management Strategy & Framework, covering the full risk lifecycle (identify, assess, treat, monitor, report).
• Design, maintain and govern risk assets such as the InfoSec Risk Register, risk heatmap, control library and decision‑making artefacts.
• Develop and annually refresh the multi‑year Information Security GRC strategy to align with business priorities and emerging threats.
• Oversee delivery of strategic cyber‑security initiatives, ensuring budget alignment and measurable outcomes.
• Define and embed KPIs/KRIs to track risk reduction, control health and cultural adoption.

Required profile

• 12+ years of experience in information security, with at least 2–3 years dedicated to GRC domains.
• Proven leadership of enterprise‑level projects and strong stakeholder management with senior executives.
• Significant banking or financial‑services background and deep knowledge of regulatory requirements.
• Master’s degree in Information Technology, Information Security or a related discipline.
• Professional certifications such as CISA, CISM, CISSP, CRISC are highly desirable.

Required skills

• In‑depth knowledge of ISO 27001 security framework.
• Experience with NIST 800 series guidelines.
• Familiarity with PCI‑DSS compliance standards.
• Understanding of SWIFT CSP requirements.
• Proficiency in COBIT governance model.