Assistant Manager, Security Governance & Compliance (UAE National)

Commercial Bank of Dubai
Dubai
Workplace: OnsiteFull timeFunction: Legal, Risk & ComplianceExperience: 5-7 yearsEducation: bachelorsSkills: ["Cross-functional collaboration","Risk assessment","Stakeholder collaboration","Thought leadership"]

Support the implementation, monitoring, and continuous improvement of the bank’s information security governance and compliance framework. Build and enhance security governance strategy, policies, metrics, and management reporting; coordinate audit and evidence activities; and lead targeted security awareness including phishing simulations. Perform ISMS and third-party risk assessments, integrate threat modelling into change and development, and ensure compliance with standards such as ISO/IEC 27001, NIST, PCI-DSS, and SWIFT CSP.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Commercial Bank of Dubai
Commercial Bank of Dubai
2 days ago

Assistant Manager, Security Governance & Compliance (UAE National)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Support the implementation, monitoring, and continuous improvement of the bank’s information security governance and compliance framework. Build and enhance security governance strategy, policies, metrics, and management reporting; coordinate audit and evidence activities; and lead targeted security awareness including phishing simulations. Perform ISMS and third-party risk assessments, integrate threat modelling into change and development, and ensure compliance with standards such as ISO/IEC 27001, NIST, PCI-DSS, and SWIFT CSP.
Location: Dubai
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Manager level

Key Responsibilities

  • •Design, implement, and continuously enhance an information security governance framework aligned with strategic goals, regulatory obligations, and risk appetite.
  • •Develop and maintain security metrics dashboards and reporting to track control effectiveness, risk posture, and compliance status.
  • •Establish and enforce enterprise-wide security policies, standards, and procedures; lead security awareness programs including phishing simulations, role-based training, and executive briefings.
  • •Ensure ongoing compliance with international and UAE-specific regulatory frameworks and standards such as ISO/IEC 27001, NIST, PCI-DSS, NESA, UAE IA, and SWIFT CSP.
  • •Conduct security risk and vulnerability assessments (including ISMS, change initiatives, thematic reviews, and third parties) and implement threat modelling practices within the software development lifecycle and change management processes.

Key Requirements

  • •Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management, or a related discipline.
  • •5–7 years of experience in information security, cybersecurity governance, IT risk, technology compliance, audit, or related functions, preferably in banking/financial services.
  • •Strong understanding of information security governance frameworks, regulatory requirements, risk management practices, security controls, and internal policy management.
  • •Experience with audit coordination, compliance monitoring, control testing, evidence management, policy review, risk registers, management reporting, and remediation tracking.
  • •Knowledge of cybersecurity standards and frameworks including ISO/IEC 27001, NIST, PCI-DSS, SWIFT CSP, and UAE regulatory requirements; experience with threat modelling (e.g., MITRE ATT&CK, STRIDE, OWASP) is preferred.
Experience:5-7 yearsBankingFinancial servicesCybersecurity governanceIT riskSecurity compliance
Education:Bachelor's in Information Security, Cybersecurity, Computer Science, Information Technology, Risk Management, or a related discipline
Skills:Cross-functional collaborationRisk assessmentStakeholder collaborationThought leadership
Certifications:CISSPCISMCISACRISCISO 27001 Lead ImplementerISO 27001 Lead Auditor
Tech Stack:ISO/IEC 27001NISTPCI-DSSNESAUAE IASWIFT CSPDevSecOpsMITRE ATT&CKSTRIDEOWASP

Eligibility

Nationality:UAE National

Company Brief

Commercial Bank of Dubai
Commercial Bank of Dubai (CBD) is a UAE-based full-service bank providing personal, corporate and digital banking solutions, trade finance, treasury and wealth services. Operating for over 50 years, CBD supports UAE businesses and individuals through branches and digital channels.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Dubai, United Arab Emirates
Founded: 1969
Glassdoor
Glassdoor: 2.5
WebsiteLinkedInGlassdoor