Executive Manager - Squad Cyber Technical Lead

We are seeking an Executive Manager – Squad Cyber Technical Lead to lead the delivery of a cybersecurity squad across four key workstreams: Application Security (AppSec), AI Governance, Continuous Security Validation, and Compliance & Evidence Management.

The role will ensure delivery is aligned with 2nd Line of Defense (2LoD) approved policies, defined SLAs, regulatory requirements, and CBUAE inspection-readiness. The successful candidate will provide technical leadership across DevSecOps, cloud security, and AI/LLM security within a highly regulated banking environment.

Key Responsibilities

• Lead and oversee delivery across AppSec, AI Governance, Continuous Security Validation, and Compliance Trail workstreams.
• Ensure adherence to approved security policies, controls, SLAs, and regulatory requirements.
• Own and manage the consolidated cybersecurity tooling ecosystem, including tools such as SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, and AWS Security Hub.
• Drive vendor consolidation, tooling integration, and security architecture across the technology landscape.
• Establish and maintain an end-to-end security evidence and attestation framework, including the DefectDojo Attestation Power BI reporting chain.
• Act as the 1st Line of Defense (1LoD) technical counterpart to 2LoD Risk/Compliance and the AI Centre of Excellence.
• Chair the Security Champions Guild and drive collaboration, knowledge sharing, and security adoption across engineering teams.
• Resolve cross-workstream priorities, dependencies, risks, and technical challenges.
• Prepare and present the monthly DevSecOps Governance Dashboard to 2LoD stakeholders.
• Ensure continuous regulatory and audit readiness, with a strong focus on CBUAE requirements and inspection preparedness.
• Drive implementation of security controls across cloud, application, AI/ML, and DevSecOps environments.

Required Experience & Expertise

• Strong experience in Cybersecurity Engineering and technical leadership, with proven expertise across:
• DevSecOps and Application Security
• Cloud Security across Azure and AWS
• AI/ML and LLM Security & Governance
• Security validation, compliance, and assurance
• Significant experience within banking or other highly regulated industries is essential.
• Hands-on experience implementing and operating security controls in a 3 Lines of Defense (3LoD) model, particularly within 1LoD.
• Proven ability to work effectively with 2LoD on security policies, risk, assurance, controls, and independent testing.
• Strong understanding and practical experience with applicable regulatory and security frameworks, including:
• CBUAE Decree-Law No. 6 of 2025
• CBUAE Enabling Technologies Guidelines
• CBUAE AI/ML Guidance Note
• NIST AI Risk Management Framework (AI RMF)
• ISO/IEC 42001
• Experience managing cybersecurity tooling, security integrations, evidence management, and governance reporting.

Mandatory Certifications

• CISSP – Mandatory
• One of the following:
• CCSP
• AWS Certified Security – Specialty
• Microsoft Azure Security Engineer Associate
• CISM or ISO/IEC 42001 Lead Implementer
• Certified DevSecOps Professional (CDP) or equivalent certification

Desirable Certifications

• SABSA
• GIAC GCSA

Skills: Cybersecurity Engineering , DevSecOps , Cloud Security