Information Security Manager experience in VAPT

Urgent requirement for Information Security Manager experience in VAPT projects along with UAE IA, PCI DSS, Swift CSP in banking domain is required for our banking client in Sharjah ,UAE

Strong Information Security experience within the banking/financial sector – this is a key requirement, considering the exposure needed to various banking systems, regulatory requirements and the volume of concurrent activities.--Must

Strong Information Security Governance/GRC experience covering policies, standards, risk assessments, risk registers, risk acceptance/exceptions and compliance.--Must

Hands-on experience with UAE IA/NESA, including implementation, assessments and policy/control alignment.--Must

Experience managing PCI DSS, SWIFT CSP, VAPT and regulatory/security assessments.--MustProven experience managing audit/regulatory findings through remediation and validated closure.--Must

Experience acting as the Information Security lead for major technology, digital, cloud, infrastructure and application projects.--Must

Ability to manage multiple security/regulatory projects simultaneously and coordinate effectively with IT, Business, Risk, Audit, Compliance, PMO and external parties.---Must

Relevant professional certification(s), preferably CISM, CRISC, CISA and/or CISSP.--Must
Banking Domain --Must

Position Overview

The Information Security Manager will work under the Head of Information Security and be responsible for developing, implementing, and overseeing security measures that safeguard the Bank’s information assets. This role requires strong governance, regulatory compliance expertise, and leadership in managing multiple concurrent security projects. 

Key Responsibilities

• Strategy: Assist in developing the information security strategy and roadmap across all security domains.


• Projects: Lead end-to-end security projects including UAE IA/NESA assessments, PCI DSS, SWIFT CSP, and VAPT.


• Compliance: Ensure adherence to regulatory requirements, manage audit findings, and validate closure of gaps.


• Leadership: Act as the security lead for technology, digital transformation, cloud, infrastructure, and application projects.


• Risk: Advise management on risk issues, recommend mitigation actions, and support enterprise risk programs.


• Awareness: Develop and deliver security awareness and training programs across the organization.


• Third-Party: Establish risk-based processes for vendor due diligence, onboarding, monitoring, and offboarding.

Required Skills & Experience

• 10–12 years of relevant Information/Cyber Security experience in the banking/financial sector.


• Strong knowledge of Information Security Governance/GRC including policies, standards, risk registers, and compliance.


• Hands-on expertise with UAE IA/NESA, PCI DSS, SWIFT CSP, and VAPT.


• Proven ability to manage audit/regulatory findings through remediation and validated closure.


• Experience coordinating with IT, Business, Risk, Audit, Compliance, PMO, and external parties.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.


• Professional certifications such as CISM, CRISC, CISA, or CISSP.

Desired Attributes

• Strong communication skills to engage with technical and non-technical stakeholders.


• Ability to manage multiple concurrent projects and prioritize effectively.


• Adaptability to evolving IT landscapes and emerging security technologies.