Chief Information Security Officer

About the role

Fortis, a fast‑growing fintech operating across the MENA region, is seeking a Chief Information Security Officer to lead its information security function in the UAE. The role will be the designated Information Security Officer for the Central Bank of the UAE (CBUAE) licence process and will ensure the organisation meets the highest regulatory and security standards.

Key responsibilities

• Act as the Information Security Officer for CBUAE, complete the Fit & Proper assessment and maintain the full documentation package (policies, procedures, evidence).
• Maintain the information security risk register, close gaps against PCI DSS, PCI PIN and CBUAE requirements, and coordinate internal and external audits.
• Adapt global information security policies to UAE regulations, oversee local implementation, and participate in architecture reviews and new product launches.
• Serve as the primary point of contact for security incidents, manage the incident lifecycle, notify CBUAE when required, and drive corrective actions.
• Run the security awareness programme for the UAE team, align with global initiatives and report on security KPIs and compliance status.

Required profile

• UAE resident, available for full‑time permanent employment.
• Minimum 3 years (preferably 5 + years) experience in information security within fintech, banking, PSP or other regulated financial organisations.
• Proven ability to work autonomously, represent the company before regulators and auditors, and collaborate in matrix environments.

Required skills

• Deep knowledge of PCI DSS (mandatory) and PCI PIN standards.
• Familiarity with CBUAE regulatory requirements and other payment security standards.
• Experience preparing security policies, procedures and audit evidence packages.
• Strong capability in information security risk management, audit coordination and incident response.
• Ability to design and deliver security awareness programmes.