FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in Information Security Management Systems, risk management frameworks, and regulatory compliance, with a strong focus on ISO 27001, NIST, and PCI DSS standards. Proven ability to lead security initiatives, manage incidents, and communicate effectively with stakeholders at all levels.
Highest-signal resume keywords
Information Security Management System (ISMS)ISO 27001 ImplementationCloud Security (AWS, GCP, Azure)Regulatory Compliance (DFSA, CBUAE, VARA)Incident Response Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk Management FrameworkData Loss PreventionThreat and Vulnerability ManagementDevSecOpsPenetration TestingSecurity Incident ManagementIAM PoliciesNetwork SegmentationSecurity AuditsCrypto Custody Management
Soft Skills
Communication SkillsLeadershipCrisis ManagementStakeholder EngagementTraining and Awareness
Tools & Technologies
MFASIEMIDS/IPSRBACCloud Environments
Certifications & Qualifications
CISSPCISMCRISCISO 27001 Lead ImplementerISO 27001 Auditor
Industry Keywords
CybersecurityFinTechPaymentsVirtual AssetsData Protection Regulation
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonGo
About the role
Key responsibilities & impact- Own UMO's information security strategy, programme, and roadmap, reporting directly to the CEO/Founder
- Own the Information Security Management System and Technology Risk Management Framework across the DIFC, UAE mainland, and Africa
- Report to the Board, Information Security Steering Committee, and Executive Committee on risk posture, control effectiveness, incidents, and residual risks
- Escalate material risks directly to the Board and block or delay releases, launches, or changes with unacceptable security risk
- Ensure alignment with ISO 27001, NIST, SOC 2, PCI DSS, and applicable regulatory requirements
- Oversee regulatory cybersecurity reporting to DFSA, CBUAE, VARA, and African regulators
- Lead ISO 27001, SOC 2, and PCI DSS audits, attestations, inspections, and remediation
- Oversee asset classification and maintain the Asset Log
- Own data classification, encryption standards, and Data Loss Prevention controls
- Define and enforce IAM, Zero Trust, and Privileged Access Management policies
- Lead threat and vulnerability management across internal configurations, external attacks, and cloud environments
- Set secure software development lifecycle requirements and oversee DevSecOps effectiveness
- Govern crypto custody, wallet infrastructure, and private key management
- Run third-party and vendor security due diligence and monitoring
- Oversee the Technology Risk Register and approve risk treatment strategies
- Implement and monitor security controls including MFA, network segmentation, RBAC, SIEM, and IDS/IPS
- Command major security incidents affecting payment systems, APIs, and cloud infrastructure
- Own incident response procedures, playbooks, exercises, and simulations
- Coordinate Business Continuity and Disaster Recovery plans
- Govern penetration testing, continuous scanning, and log analysis
- Collaborate with the CCO/MLRO on fraud prevention, AML transaction monitoring, and sanctions screening
- Run company-wide security awareness training and phishing simulations
- Own the information security budget and report security KPIs including MTTD/MTTR, vulnerability remediation rates, and risk treatment status
- Build and lead the Information Security function and drive a security-first culture
- Maintain relationships with regulators, auditors, and third-party providers
- Co-approve high residual risks with the CEO
Requirements
What you’ll need- 10+ years in Information Security, Cybersecurity, or Technology Risk roles
- Proven experience implementing an ISMS aligned with ISO 27001, NIST, or comparable frameworks
- Led at least one completed audit to a successful outcome: an ISO 27001 certification, a SOC 2 audit report, or a PCI DSS compliance assessment
- Deep knowledge of cloud security (AWS, GCP, or Azure), hybrid environments, and API-based ecosystems
- Experience in regulated environments (FinTech, virtual assets, payments, or money platforms)
- Working knowledge of UAE financial and data protection regulation (DFSA, CBUAE, VARA, PDPL)
- Proven track record of reporting to Boards and regulators
- Experience leading major incidents and crisis situations
- Exceptional ability to communicate complex security concepts to technical and non-technical stakeholders
- Fluent English
- Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor are a plus
- Experience with more than one of ISO 27001, SOC 2, and PCI DSS, or taking a company through one from scratch is a plus
- UAE regulator licensing, inspection, or cyber resilience assessment experience is a plus
- Experience with financial services regulation and data localisation requirements in African markets is a plus
- Hands-on experience securing crypto wallets, HSM/MPC-based key management, or high-volume payment gateways is a plus
- Go or Python for security automation is a plus
- Experience scaling a security function from MVP to production in a fast-moving startup is a plus
- Russian and Ukrainian are preferred
Benefits
Comp & perks- A meaningful equity stake in a venture built from zero to one
- Base yourself in Lisbon, Dubai, Kyiv, or Lviv, with openness to remote for the right fit