Chief Information Security Officer; CISO), UAE and Middle East & Pakistan Cluster

Job Summary

The Chief Information Security Officer (CISO) for the UAE, Middle East, and Pakistan Cluster leads the implementation and embedding of the Information and Cyber Security (ICS) Risk Type Framework (RTF) across diverse countries. The role requires a strategic, hands‑on approach to enhance risk‑management capabilities, ensuring consistent identification, assessment, and mitigation of security risks aligned with compliance and legal requirements while minimizing impact on clients.

The CISO maintains an overarching perspective ofICS activities, conducts regular risk assessments, monitors progress, and reports outcomes to stakeholders and governance forums. The position also supports the Wholesale, Retail and Business (WRB) & Markets CISO in advancing AI and Digital Assets security strategy, fostering the organization’s focus on emerging technologies and digital innovation.

• Lead the rollout and embedding of theICS Risk Type Framework across the Middle East & Pakistan Cluster, ensuring alignment with global risk appetite and regulatory requirements.
• Develop and maintain a comprehensive understanding of the digital footprint across the cluster to inform risk assessments and security control strategies.
• Coordinate with cross‑functional teams including technology, operations, and risk management to drive consistent
  
  ICS risk identification, assessment, and mitigation practices.
• Manage the execution of threat‑scenario based risk assessments locally, capturing evolving threats and vulnerabilities pertinent to the regional digital environment.
• Collaborate with the WRB & Markets CISO to advance cybersecurity strategies related to AI and Digital Assets.
• Drive continuous improvement in cyber risk management processes, fostering a culture of risk awareness and regulatory compliance.
• Engage proactively with local regulators, audit teams, and external stakeholders to demonstrate the bank’s risk management capabilities and respond to inquiries and audits.
• Maintain effective communication channels and deliver regular reporting to senior leadership and governance committees onICS risk posture and remediation progress.

• Serve as an inspirational and authoritative leader within the cluster, championing a robust cybersecurity culture and effectively managing relationships with senior executives, technology leaders, and regional partners.
• Cultivate a high‑performance team culture, supporting talent development and ensuring cybersecurity practices evolve with emerging threats and technological advancements.
• Balance strategic oversight with detailed operational focus, ensuring timely delivery of projects and adherence to regulatory commitments without sacrificing agility.

• Oversee comprehensive
  
  ICS risk management, leveraging qualitative and quantitative data to validate controls and accelerate risk assessment cycles.
• Craft specialized risk treatment plans that address thematic cyber challenges, enhancing resilience to evolving threats and embedding robust controls across technological and operational domains.
• Collaborate with regulatory bodies and audit teams to demonstrate transparency and maturity inICS risk posture, fostering trust and safeguarding the bank’s reputation.

• Drive innovative cybersecurity measures aligned with the bank’s strategic priorities around AI and Digital Asset security, collaborating with global counterparts to develop forward‑looking strategies.
• Identify opportunities to enhance cybersecurity frameworks, leveraging analytics and emerging tools to streamline risk assessments and strengthen defenses.
• Spearhead initiatives that position the bank at the forefront of cybersecurity readiness, reinforcing trust with clients and stakeholders and supporting sustained business growth.

• Deep knowledge of the cyber threat landscape and a thorough understanding ofICS controls pertinent to banking operations.
• Experience overseeing complex, multi‑year cybersecurity programs within large, matrixed organizations.
• Strong stakeholder management and communication skills,…