Information & Cyber Security; ICS Risk Specialist

Information & Cyber Security (ICS) Risk Specialist

Dubai, United Arab Emirates | Posted on 04/21/2026

my Zoiis changing lives for the better for those who deserve it the most. We are an exciting fintech start-up aiming to promote financial inclusion globally. Ourvision is to provide a level playing field to the unbanked and the underbankedin accessing essential financial services in an affordable, convenient, and transparent fashion. We are looking for smart, ambitious, and purpose-drivenindividuals to join us in this journey.

Weare seeking an Information & Cyber Security (ICS) Risk & Compliance Specialist to collaborate with our Technology and Compliance teams instrengthening our information security posture while aligning with UAEregulatory mandates. This role will bridge technical controls, complianceframeworks, and financial sector regulatory obligations, whilst ensuring safeadoption of enabling technologies. The ideal candidate will have stronginformation and cybersecurity technical skills, knowledge of global and local information and cybersecurity regulations and standards, including with respectto enabling technologies, good project management experience, and a proactive mindset for continuous improvement and stakeholder engagement.

Overall, thisrole will help theICS Team ensure that information systems remain secure and compliant with internal and external regulations, and protect our IT infrastructure and digital assets from security threats.

• Lead and execute on information and cybersecurity regulatory compliance initiatives, such as CBUAE Information Security related and NESA UAE Information Assurance annual self-certification as well as the remediation exercise.
• Own the PCI-DSS lifecycle, encompassing scoping, remediation and coordination of gap or technical assessments - liaising with external vendor(s), Sec Ops, SREs and Dev Ops (as required).
• Monitor, evidence, and report on CIS controls, including the implementation of any identified gaps and improvements to existing controls where appropriate. Drive adoption across IT and business functions (as required).
• Lead and drive all cyber risk and compliance activities from a project management perspective, reporting to the CISO. This may include compliance with additional regulations, frameworks, or standards in the future, in alignment with the business roadmap and adoption of enabling technologies.
• Collaborate with the Sec Ops Team to ensure that the technical implementation of security controls meets regulatory requirements for existing and new tools, while automating processes such as control monitoring efficiently and effectively by leveraging SOC tools whenever feasible.
• Track, interpret, and operationalize notices and circulars from the Central Bank of the UAE, including maintaining a central repository of CBUAE directives and related actions.
• Support the Cybersecurity Manager and CISO with conducting internal audits and prepare for potential regulatory inspections.
• Support the CISO and Cybersecurity Manager with periodic reporting to the Executive Risk Committee, ensuring that updates are prepared in advance and exploring automation opportunities.
• Conduct proactive annual threat-led risk assessments for critical assets, supporting the Cybersecurity Manager and CISO with risk-based information and cybersecurity strategy and roadmap.
• Collaborate with IT, legal, compliance, and other teams as required to implement timely controls and reporting obligations while also supporting with information security training and awareness.
• Formulate a future-ready integrated control framework aimed at automating, streamlining, and enhancing the efficiency and effectiveness of information and cybersecurity regulatory and compliance requirements.
• Explore and propose a solution to automate information and cyber compliance monitoring, evidencing, and reporting, utilizing visual dashboards to demonstrate risk posture and compliance status to cross-functional leadership.

• Bachelor’s degree in Cybersecurity or a related discipline; a Master’s degree in a related field is preferred.
• Certifications:
  
  CISSP and CISA / CISM and…