Executive Manager - Squad Cyber Technical Lead
- Abu Dhabi, United Arab Emirates
Posted 5 days ago
About the role
We are seeking an Executive Manager – Squad Cyber Technical Lead to lead the delivery of a cybersecurity squad across four key workstreams: Application Security (AppSec), AI Governance, Continuous Security Validation, and Compliance & Evidence Management.
The role will ensure delivery is aligned with 2nd Line of Defense (2LoD) approved policies, defined SLAs, regulatory requirements, and CBUAE inspection-readiness. The successful candidate will provide technical leadership across DevSecOps, cloud security, and AI/LLM security within a highly regulated banking environment.
Key Responsibilities
- Lead and oversee delivery across AppSec, AI Governance, Continuous Security Validation, and Compliance Trail workstreams.
- Ensure adherence to approved security policies, controls, SLAs, and regulatory requirements.
- Own and manage the consolidated cybersecurity tooling ecosystem, including tools such as SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, and AWS Security Hub.
- Drive vendor consolidation, tooling integration, and security architecture across the technology landscape.
- Establish and maintain an end-to-end security evidence and attestation framework, including the DefectDojo Attestation Power BI reporting chain.
- Act as the 1st Line of Defense (1LoD) technical counterpart to 2LoD Risk/Compliance and the AI Centre of Excellence.
- Chair the Security Champions Guild and drive collaboration, knowledge sharing, and security adoption across engineering teams.
- Resolve cross-workstream priorities, dependencies, risks, and technical challenges.
- Prepare and present the monthly DevSecOps Governance Dashboard to 2LoD stakeholders.
- Ensure continuous regulatory and audit readiness, with a strong focus on CBUAE requirements and inspection preparedness.
- Drive implementation of security controls across cloud, application, AI/ML, and DevSecOps environments.
Required Experience & Expertise
- Strong experience in Cybersecurity Engineering and technical leadership, with proven expertise across:
- DevSecOps and Application Security
- Cloud Security across Azure and AWS
- AI/ML and LLM Security & Governance
- Security validation, compliance, and assurance
- Significant experience within banking or other highly regulated industries is essential.
- Hands-on experience implementing and operating security controls in a 3 Lines of Defense (3LoD) model, particularly within 1LoD.
- Proven ability to work effectively with 2LoD on security policies, risk, assurance, controls, and independent testing.
- Strong understanding and practical experience with applicable regulatory and security frameworks, including:
- CBUAE Decree-Law No. 6 of 2025
- CBUAE Enabling Technologies Guidelines
- CBUAE AI/ML Guidance Note
- NIST AI Risk Management Framework (AI RMF)
- ISO/IEC 42001
- Experience managing cybersecurity tooling, security integrations, evidence management, and governance reporting.
Mandatory Certifications
- CISSP – Mandatory
- One of the following:
- CCSP
- AWS Certified Security – Specialty
- Microsoft Azure Security Engineer Associate
- CISM or ISO/IEC 42001 Lead Implementer
- Certified DevSecOps Professional (CDP) or equivalent certification
Desirable Certifications
- SABSA
- GIAC GCSA
Skills: Cybersecurity Engineering , DevSecOps , Cloud Security