Executive Manager - Squad Cyber Technical Lead

We have an urgent requirement for  Executive Manager - Squad Cyber Technical Lead( Head of AppSec, AI Governance, Continuous Security Validation, and Compliance Trai)  with experience in banking domain is  required for our banking clients in Abu Dhabi ,UAE

Operate a squad's 4-workstream delivery (AppSec / AI Governance / Continuous Security Validation / Compliance Trail) against 2LoD approved policies, with measurable SLA adherence and CBUAE inspection-readiness--Must

Own the consolidated tooling stack (e.g. SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub) — vendor consolidation, integration architecture, and DefectDojo→Attestation→Power BI evidence chain.---Must

1LoD role owns delivery against 2LoD-approved policies with measurable SLA adherence and CBUAE inspection-readiness---Must

Deep expertise in Azure + AWS security, CI/CD security integration, OPA, and infrastructure-as-code security.--Must

Strong working knowledge of SonarQube, Snyk, ServiceNow IRM, Microsoft Defender for Cloud, AWS Security Hub, Security Agent, and DefectDojo. Experience with Power BI for security metrics--Must.

Banking or regulated-industry experience essential, including hands-on delivery against CBUAE (Decree-Law 6/2025, Enabling Technologies Guidelines, AI/ML Guidance Note), NIST AI RMF and ISO/IEC 42001.---Must
Job Summary
We are seeking a senior technical leader to operate and scale a multi-disciplinary security engineering squad covering Application Security, AI Governance, Continuous Security Validation, and Compliance Trail. This 1LoD role owns delivery against 2LoD-approved policies with measurable SLA adherence and CBUAE inspection-readiness. You will consolidate tooling, drive integration architecture, and act as the primary 1LoD counterpart to 2LoD Risk and the AI Center of Excellence.
Key ResponsibilitiesMulti-Workstream Delivery Leadership
Operate and lead a squad across 4 workstreams: AppSec, AI Governance, Continuous Security Validation, and Compliance Trail. Ensure all delivery is mapped to 2LoD-approved policies with measurable SLA adherence and maintained CBUAE inspection-readiness.
Tooling Stack Ownership & Integration
Own the consolidated security tooling stack including SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub. Drive vendor consolidation, define integration architecture, and maintain the DefectDojo → Attestation → Power BI evidence chain for audit and regulatory reporting
1LoD Governance & Stakeholder Management
Act as the primary 1LoD counterpart to 2LoD Risk and AI CoE. Chair the Security Champions Guild, arbitrate cross-workstream priorities, and present the monthly DevSecOps Governance Dashboard to 2LoD leadership with clear risk metrics, SLA status, and remediation posture.
Regulatory & Policy Alignment
Ensure hands-on delivery aligns with CBUAE requirements including Decree-Law 6/2025, Enabling Technologies Guidelines, and AI/ML Guidance Note. Align engineering controls and processes to NIST AI RMF and ISO/IEC 42001. Maintain evidence for regulatory inspections.
DevSecOps & Cloud Security Engineering
Embed security into CI/CD pipelines across Azure and AWS environments. Drive shift-left practices, IaC security, container security, and automated control validation. Lead security engineering for AI/LLM systems including model supply chain, prompt security, and runtime guardrails.
3-Lines-of-Defense Operations
Implement and operate controls in 1LoD while engaging credibly with 2LoD on policy interpretation, assurance activities, and independent testing coordination. Support 3LoD audit requirements with complete evidence trails.
Required Qualifications & SkillsExperience: 12+ years in cybersecurity engineering with 5+ years proven leadership across DevSecOps, cloud security, and AI/LLM security. Banking or regulated-industry experience essential.Technical Leadership: Demonstrated ability to lead multi-disciplinary squads and manage cross-workstream delivery against SLAs.Cloud & DevSecOps: Deep expertise in Azure + AWS security, CI/CD security integration, OPA, and infrastructure-as-code security.AI/LLM Security: Hands-on experience securing AI/ML pipelines, LLM deployments, and AI agents. Familiarity with Claude, Codex, and AI red-teaming concepts.Tooling: Strong working knowledge of SonarQube, Snyk, ServiceNow IRM, Microsoft Defender for Cloud, AWS Security Hub, Security Agent, and DefectDojo. Experience with Power BI for security metrics.Regulatory & Frameworks: Working knowledge of CBUAE Decree-Law 6/2025, CBUAE Enabling Technologies Guidelines, CBUAE AI/ML Guidance Note, NIST AI RMF, and ISO/IEC 42001.Governance: Proven experience operating within a 3-Lines-of-Defense model. Strong stakeholder management with 2LoD Risk, Compliance, and AI CoE.Certifications : CISSP (mandatory) · CCSP or AWS Certified Security – Specialty or Azure Security Engineer Associate · CISM or ISO/IEC 42001 Lead Implementer · Certified DevSecOps Professional (CDP) or equivalent.(Anyone Must)Desirable: SABSA, GIAC GCSA