Cybersecurity & Information Assurance - Senior Management role (UAE National)

Job Description

Our Client is seeking a seasoned Information Security Leader to drive the cybersecurity strategy across their investment portfolio. This role is responsible for establishing a group-wide cybersecurity governance framework, aligning with risk and resilience teams, and ensuring preparedness for audits and regulatory compliance. The ideal candidate will provide leadership, technical expertise, and strategic vision to elevate the cybersecurity maturity of all portfolio companies.

Key Responsibilities :

• Establish and maintain a group-level information security governance framework, aligned with enterprise risk and resilience functions.
• Lead the Portfolio Information Assurance team, ensuring cybersecurity goals are aligned with broader organizational strategy.
• Develop, implement, and enforce cybersecurity policies, procedures, and standards across portfolio entities.
• Oversee and enhance the implementation of security controls and frameworks to increase overall cybersecurity maturity.
• Manage cybersecurity budgets and resources, ensuring efficient use and prioritization of security initiatives.
• Conduct cybersecurity risk assessments, identify vulnerabilities, and recommend effective risk mitigation strategies.
• Prepare and support audit readiness across portfolio companies; ensure alignment with internal and external compliance standards.
• Provide regular cybersecurity updates and risk posture reports to executive boards and governance bodies.
• Drive adoption and integration of Governance, Risk, and Compliance (GRC) tools for informed, risk-based decision-making.
• Spearhead cybersecurity awareness and training programs across the organization and promote best practices.
• Participate in M&A due diligence by evaluating cybersecurity risks of acquisition targets.
• Represent the organization in the cybersecurity community, leading CISO roundtable, forums, and knowledge-sharing initiatives.
• Manage cyber insurance coverage as a strategic component of the organization’s risk treatment plan.
• Stay current with emerging technologies, threats, regulations, and market trends to ensure continuous improvement of security posture.
• Maintain a comprehensive cybersecurity metrics and reporting framework to track performance and drive accountability.

Requirements