This role sits at the intersection of cybersecurity governance, audit, and cloud/SaaS risk assessment. You will take ownership of audit activities, lead vendor security reviews, and play a key role in approving or rejecting technology solutions based on cybersecurity risk.

A highly regulated organisation in Dubai with an established cybersecurity function, focused on strengthening governance, managing risk, and improving security oversight across cloud and SaaS environments. The team is offering strong ownership and exposure to key decision making forums.

• Manage cybersecurity audits and compliance activities (ISO, SOC2, GDPR, UAE regulations), including evidence collection and responses.
• Assess and approve/reject SaaS and cloud solutions, evaluating areas such as data hosting, encryption, compliance, and security posture.
• Design and manage vendor security questionnaires and conduct end-to-end risk a...