What You’ll Do

• Define and lead   cybersecurity and GRC strategy, including policies, standards, and programs that protect corporate and customer digital assets, reduce business risk, and support effective governance and compliance
• Oversee security investigations and incident response, including impact analysis, executive updates, post incident recommendations, and plans to avoid similar issues in the future
• Direct and approve the design of security systems, identity and access policies, and GRC procedures that support a secure, scalable SaaS environment
• Maintain a current understanding of the cyber threat landscape, including relevant risks to SaaS platforms, cloud environments,  , and the broader technology industry
• Translate threat, regulatory, and customer requirements into actionable plans that protect the business and support growth
• Ensure compliance with applicable laws, regulations, customer commitments, and industry frameworks
• Schedule and oversee periodic security audits, compliance assessments, certifications, and customer assurance activities
• Oversee identity and access management, third party risk management, vulnerability management, secure configuration practices, and security awareness programs
• Ensure cybersecurity and GRC policies and procedures are communicated clearly to employees and that compliance expectations are understood and enforced.
• Oversee teams, employees, contractors, and vendors involved in cybersecurity and GRC, including hiring, performance management, mentoring, and team development
• Continuously update the cybersecurity and GRC strategy to incorporate new technology, evolving threats, customer expectations, and business priorities.
• Brief the executive team and board on security posture, key risks, incidents, program maturity, and investment priorities
• Communicate security best practices and business relevant risks across the company, beyond security and IT, to strengthen shared ownership of security

Who You Are

• Proven background leading information security within SaaS or platform oriented global companies
• Strong understanding of current and emerging technologies for security in a cloud based, microservices based environment
• Expansive experience with compliance frameworks such as SOX, PCI, GDPR, CCPA, SOC 2, and ISO 27001, and their application as both a service provider and a customer
• Familiarity and comfort with modern DevOps processes as well as distributed cloud environments such as GCP and AWS
• Experience partnering with Product, Engineering, Legal, Privacy, Sales, IT, and executive leadership to align security priorities with business objectives
• Ability to communicate cyber risk, security posture, and investment tradeoffs clearly to executives, board members, customers, auditors, and technical teams
• History of building and growing collaborative security and compliance teams that cross functional teams value working with

Are you interested in this position?

Apply by clicking on the “Apply Now” button below!

#FintechCareersGCC
#GCCFintechJobs
#TechOpportunitiesGCC
#FinanceTechGulf
#GCCJobSearch
#FintechOpportunities
#GulfCareerHub
#TechJobsGCC
#FintechGCC
#CareerInFinanceGCC