Michael Page
Sr Information Security Governance & Assurance Manager
Ae
AED 540k – AED 660k/yr
Posted about 11 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Lead ISO 27001, SOC 2 and security assurance for a Fintech
Build and operate controls directly with tech teams.
About Our Client
A growing FS organisation in the Middle East.
Job Description
- Lead the day-to-day security governance, certification and assurance programme.
- Own the ISMS, including ISO 27001 certification, surveillance, recertification and continual improvement.
- Lead SOC 2 Type I / II readiness and examination activities, including control mapping, evidence management and auditor coordination.
- Build and maintain security control frameworks, policies, evidence programmes and remediation processes.
- Work directly with engineering, product and operational teams to implement and improve security controls.
- Perform control testing, identify deficiencies and drive remediation through to verified closure.
- Coordinate external audits, due diligence, security questionnaires and assurance requests.
- Develop clear reporting on certification status, control effectiveness, findings, exceptions and remediation.
- Improve assurance activities through automation, reusable evidence, continuous monitoring and appropriate GRC tooling.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The Successful Applicant
- At least 10 years' experience across information security, security assurance, technology risk or a related discipline, including a minimum of five years in security GRC or assurance.
- Experience in fintech, payments, digital banking, investment, financial services or another regulated environment.
- Direct experience leading ISO 27001 certification and operating an ISMS.
- Direct experience leading SOC 2 Type I and/or Type II readiness and examinations.
- A track record of personally implementing controls, building evidence programmes and driving audits and remediation to successful outcomes.
- Experience working closely with engineering, cloud and product teams in cloud environments.
- Practical experience supporting external audits, client diligence and customer security assessments.
- Tangible experience in AI governance, AI risks or security assurance.
- Relevant qualifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM or CISSP would be advantageous.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What's on Offer
- A senior individual contributor role with direct access to the leadership.
- The opportunity to build and operate the security governance and assurance architecture for a cloud native business.
Contact
Ruwise Sheriff
Quote job ref: JN-092026-7102820
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location