Executive Manager - Squad Cyber Technical Lead

We are seeking an Executive Manager – Squad Cyber Technical Lead to lead the delivery of a cybersecurity squad across four key workstreams: Application Security (AppSec), AI Governance, Continuous Security Validation, and Compliance & Evidence Management. The role will ensure delivery is aligned with 2nd Line of Defense (2LoD) approved policies, defined SLAs, regulatory requirements, and CBUAE inspection-readiness. The successful candidate will provide technical leadership across DevSecOps, cloud security, and AI/LLM security within a highly regulated banking environment. Key Responsibilities Lead and oversee delivery across AppSec, AI Governance, Continuous Security Validation, and Compliance Trail workstreams. Ensure adherence to approved security policies, controls, SLAs, and regulatory requirements. Own and manage the consolidated cybersecurity tooling ecosystem, including tools such as SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, and AWS Security Hub. Drive vendor consolidation, tooling integration, and security architecture across the technology landscape. Establish and maintain an end-to-end security evidence and attestation framework, including the DefectDojo → Attestation → Power BI reporting chain. Act as the 1st Line of Defense (1LoD) technical counterpart to 2LoD Risk/Compliance and the AI Centre of Excellence. Chair the Security Champions Guild and drive collaboration, knowledge sharing, and security adoption across engineering teams. Resolve cross-workstream priorities, dependencies, risks, and technical challenges. Prepare and present the monthly DevSecOps Governance Dashboard to 2LoD stakeholders. Ensure continuous regulatory and audit readiness, with a strong focus on CBUAE requirements and inspection preparedness. Drive implementation of security controls across cloud, application, AI/ML, and DevSecOps environments.

Desired Candidate Profile

Required Experience & Expertise Strong experience in Cybersecurity Engineering and technical leadership, with proven expertise across: DevSecOps and Application Security Cloud Security across Azure and AWS AI/ML and LLM Security & Governance Security validation, compliance, and assurance Significant experience within banking or other highly regulated industries is essential. Hands-on experience implementing and operating security controls in a 3 Lines of Defense (3LoD) model, particularly within 1LoD. Proven ability to work effectively with 2LoD on security policies, risk, assurance, controls, and independent testing. Strong understanding and practical experience with applicable regulatory and security frameworks, including: CBUAE Decree-Law No. 6 of 2025 CBUAE Enabling Technologies Guidelines CBUAE AI/ML Guidance Note NIST AI Risk Management Framework (AI RMF) ISO/IEC 42001 Experience managing cybersecurity tooling, security integrations, evidence management, and governance reporting. Mandatory Certifications CISSP – Mandatory One of the following: CCSP AWS Certified Security – Specialty Microsoft Azure Security Engineer Associate CISM or ISO/IEC 42001 Lead Implementer Certified DevSecOps Professional (CDP) or equivalent certification Desirable Certifications SABSA GIAC GCSA Skills Cybersecurity Engineering DevSecOps Cloud Security Employment Type Full-time

Keywords