Abu Dhabi Islamic Bank
Head of Information Security Risk Management
- Permanent
- Abu Dhabi, United Arab Emirates
- Experience 5 - 10 yrs
- Urgent
Job expiry date: 08/12/2026
Job overview
Date posted
24/10/2026
Location
Abu Dhabi, United Arab Emirates
Salary
Undisclosed
Compensation
Comprehensive package
Experience
5 - 10 yrs
Seniority
Senior Manager
Qualification
Bachelors degree
Expiration date
08/12/2026
Job description
Confidentiality, integrity and availability of ADIB's assets depend on how well information security risk is understood, and this Abu Dhabi head owns that picture for the Group. Cybersecurity risk assessments for business services, processes and technologies run under your supervision, both planned and ad hoc. Threat intelligence from GISD's Cyber Threat Intelligence unit and VA/PT results from the Attack Surface Reduction unit feed directly into risk identification. Risk scenarios are prioritised and reported, mitigation plans tracked with business units, and policy exceptions flagged to management. Vendor and third party risk reviews are covered as well, with mitigation plans agreed with staff and suppliers. Automation tools for the end-to-end risk cycle, a quantitative and qualitative threat modelling process and strategic, tactical and operational dashboards are yours to develop. Working with the Head of IS Governance and Risk Management, you refine policies, standards and KPIs. ORM, ITD, BCM and VCMP teams align with you, and secure coding and testing projects get your risk view. A Bachelor's in technology or a related field is required, a Master's is preferred, and banking experience, GRC tool familiarity and knowledge of ISO 27001, NESA, SWIFT CSP and PCI DSS are expected. CISSP or CRISC certification is strongly preferred.
Required skills
Key responsibilities
- Supervise cybersecurity risk assessments for business services, processes and technologies
- Review threat intelligence from GISD's Cyber Threat Intelligence unit and reflect findings in risk identification
- Assess VA/PT reports from the Attack Surface Reduction unit to identify risks
- Prioritise risk scenarios and report them to management
- Deliver planned and ad-hoc risk assessments to internal policy and external regulation
- Oversee risk monitoring plans and mitigation control implementation with business units
- Automate the end-to-end information security risk management cycle
- Improve policies, procedures, standards and guidelines with the Head of IS Governance and Risk Management
- Present management reports on the Group's risk status and posture
- Assess information security risks in projects such as secure coding and testing
- Confirm risk management KPI reports
- Review vendor and third party risk and agree mitigation plans
- Report exceptions to information risk policies, procedures and limits
- Develop risk dashboards and a quantitative and qualitative threat modelling process
- Align with ORM, ITD, BCM, VCMP and other stakeholders
Experience & skills
- Hold a Bachelor's degree in Technology or a related field, with a Master's preferred, or equivalent experience
- Demonstrate strong knowledge of banking processes and information security technologies
- Offer banking and financial services sector experience (preferred)
- Use GRC tools and risk management platforms
- Apply knowledge of ISO 27001, NESA, SWIFT CSP and PCI DSS
- Possess CISSP or CRISC certification (strongly preferred)
- Show strong business and supervisory acumen