Information Security Manager - Governance (1-Year Contract)

LocationSharjah, Sharjah, United Arab Emirates

Work modeon-site

Typecontract

SenioritySenior

Experience10–12 yrs

DepartmentInformation Security

Company size501–1,000 people

PostedSep 16, 2026 · 3w ago

Verified live12h ago

At a glanceSummarised by Seekless from the posting.

Strong information security experience within the banking/financial sector

Around 10-12 years of relevant information/cyber security experience with manager-level responsibilities

Strong information security governance/GRC experience covering policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance

Hands-on experience with UAE IA/NESA - implementation, assessments and policy/control alignment

Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory/security assessments

Proven experience managing audit/regulatory findings through remediation and validated closure

Experience acting as information security lead on major technology, digital, cloud, infrastructure and application projects

Ability to manage multiple security/regulatory projects simultaneously, coordinating with IT, Business, Risk, Audit, Compliance, PMO and external parties

Bachelor's degree

Strong communication skills - able to engage senior non-technical stakeholders without technical language

Professional certification: CISM, CRISC, CISA and/or CISSP preferred

Skills

PCI DSS

SWIFT CSP

VAPT

Benefits

Health insurance

Uae visa

Medical insurance

Employer of record support

End of service benefits

About the role

Capitex is engaging an Information Security Manager - Governance for a one-year contract with a leading UAE bank, based on-site in Dubai.

Working directly under the Head of Information Security, you will develop and implement the security measures that keep the bank’s information assets safe - identifying gaps in existing IS policies, standards, guidelines and procedures, and bringing them into alignment with regulatory requirements and industry standards.

Responsibilities

Key responsibilities:

•

Assist in the development of the information security strategy and roadmap across all security technology domains

•

Manage end-to-end security projects including UAE IA (NESA) assessments, PCI DSS, SWIFT CSP controls and VAPT

•

Verify and validate closure of gaps identified during regulatory assessments and audits, recommending alternative solutions where needed

•

Act as the Information Security lead for technology, digital transformation, cloud, infrastructure, application and business projects

•

Manage multiple security and compliance projects simultaneously, prioritising by business impact and risk

•

Ensure information security requirements are addressed through project initiation, planning, design, implementation, testing and go-live

•

Coordinate with PMO and business project managers to integrate security activities into project plans

•

Maintain security governance frameworks - policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance

•

Manage audit and regulatory findings through remediation and validated closure

•

Establish risk-based processes for third-party due diligence, onboarding, assessment, monitoring and offboarding

•

Manage the development and delivery of security awareness and training programmes

•

Advise IS management on information security risk issues in support of the bank’s wider risk management programmes

Requirements

Strong information security experience within the banking/financial sector - essential, given exposure to banking systems, regulatory requirements and volume of concurrent activities