Deputy Regional Information Security Officer بدوام كامل في الإمارات العربية المتحدة
التخصص
تكنولوجيا المعلومات
نوع الدوام
دوام كامل
الخبرة
أي مستوى
الموقع
الإمارات العربية المتحدة
وصف الوظيفة
Building the Future of Open FinancePayward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.The teamFounded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients.We are looking for a Deputy Regional Information Security Officer to own ICT security, operational resilience, and regulatory compliance across a portfolio of entities at different stages of maturity, from established licensed operations to new markets launching under frameworks. This is not a support function. You will be the named security officer for your entities, accountable to their boards and their regulators.This is a high visibility, high trust role for a security governance professional who thrives at the intersection of technology, compliance, and financial services, and who is energised by applying established group frameworks to the local needs of a growing regulated entity.Payward is one of the world's most trusted and secure digital asset platforms, operating across a growing network of regulated entities spanning Europe, the Middle East, and Asia Pacific. As we expand into new markets and deepen our regulatory footprint, the demand for embedded, senior-level ICT security leadership at the entity level has never been higher.The opportunityPrepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readinessExecute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practicesMaintain and review Business Impact Assessments (BIA), integrating findings into global resilience planningContribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenariosCollaborate with Group Security and IT to:Align UAE-specific regulatory controls with global policies and control frameworksContribute to the development of security policies to meet international and UAE compliance requirementsConduct security control validation and document evidence for internal/external auditsParticipate in remediation planning for audit findings and track progress to closureSupport the RISO in preparing and submitting regulatory documentation to regulatorsPrepare and present security and resilience reports for internal governance committees and local entity managementAssist in responses to regulatory examinations, including due diligence and compliance queriesLiaise with compliance and legal teams to interpret regulatory changes and propose control adaptationsParticipate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activitiesCoordinate with cross-functional stakeholders to embed security requirements into operational processesWhat You Will DoRegulatory GovernanceServe as the named ICT security officer for your appointed entities, with formal accountability for security risk, ICT governance, and resilience oversight at board levelPrepare and present security, risk, and resilience materials to entity boards, with material review and coaching from the Global RISO Lead beforehandAct as the primary point of contact for VARA and other relevant regulatory authorities on ICT and security matters -- including examinations, inspections, licensing interactions, and ongoing supervisory dialogueSupport entity go live processes by implementing and localizing established group ICT governance frameworks for new market launches, ensuring they meet UAE regulatory requirements and entity specific needsAs the portfolio evolves, engage with additional regulatory frameworks with support from the broader RISO teamICT Risk and SecurityLead ICT and security risk assessments for your appointed entity, escalating material risks through local governance and the Global RISO LeadMaintain and adapt entity level policies and procedures to align with group standards and UAE regulatory requirementsCoordinate control testing, evidence documentation, and audit preparation with global security and compliance teamsManage the classification, escalation, and regulatory reporting of ICT-related incidents within the timeframes required by applicable regulatorsOperational ResilienceLead business impact assessments, critical function mapping, and business continuity planning at the entity levelOversee continuity and recovery testing, ensuring outputs meet regulatory expectations and feed back into global resilience planningMaintain oversight of ICT third-party dependencies and outsourcing arrangements in line with regulatory requirementsGroup LiaisonAct as a key local liaison between UAE entities, the RISO team, Group Security, and ComplianceDrive local implementation of group frameworks, policies, and resilience standards, adapting them where jurisdiction-specific requirements demandRepresent entity priorities in group-led security initiatives and governance forumsWhat You Bring7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environmentDirect experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalentFamiliarity with UAE regulatory frameworks. Experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage and strongly preferredDemonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environmentExperience conducting risk assessments, business impact analyses, and resilience planning at the entity levelFamiliarity with ICT outsourcing and third-party risk management within group structuresAbility to translate technical risk into board-level narrative and regulatory-grade documentationComfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturityStrong project management skills and the ability to drive outcomes across cross-functional, globally distributed teamsCertifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferredFamiliarity with EU frameworks such as DORA and MiCA is strongly preferredWhy this roleYou will hold a named role within a regulated entity with accountability and board-level visibilityYou will operate at the frontier of virtual asset regulation -- VARA is one of the most advanced and fastest-evolving crypto regulatory frameworks in the world, and you will be shaping how Kraken meets it from day one of market entryYou will build ICT governance programs from scratch for new market entries, not inherit and maintain what others have set upExposure to local governance forums, regulators, and senior stakeholders, with remote guidance and preparation support from the Global RISO LeadThe scope of this role is intentionally designed to grow -- as Kraken's entity footprint expands, so does the portfolio and the regulatory breadth you will be exposed to, potentially including Asian and EU frameworks such as DORAYou will join a remote-first, international team shaping the future of crypto asset governance and resilience across some of the world's most demanding regulatory environmentsUnless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation
التعليقات
لا توجد تعليقات منشورة حتى الآن.