Deputy Regional Information Security Officer

🔥 7 hours ago

🇦🇪 United Arab Emirates (UAE) – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kraken Digital Asset Exchange

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

₿ Crypto

💸 Finance

💳 Fintech

Crypto • Finance • Fintech

Kraken Digital Asset Exchange is a cryptocurrency platform that facilitates the buying and selling of over 200 cryptocurrencies, including Bitcoin, Ethereum, and many others. Founded in 2011, Kraken provides a comprehensive suite of features for both beginner and advanced traders, such as advanced trading interfaces and margin trading. The platform emphasizes industry-leading security, deep liquidity, and 24/7 customer support, making it a trusted choice for users worldwide. Kraken caters to individual investors as well as institutional clients, offering services like OTC trading and custody. The company is committed to transparency with its proof of reserves and mission-driven values. Kraken operates globally, supporting clients in over 190 countries, with a quarterly trading volume exceeding $207 billion. However, users are advised of the high risk of crypto investments and the lack of regulation in some jurisdictions.

📋 Description

• Serve as the named ICT security officer for appointed entities, with accountability for security risk, ICT governance, and resilience oversight at board level • Prepare, present, and report security, risk, compliance, and resilience matters to entity boards, senior management committees, and regional governance forums • Act as primary contact for VARA and other regulatory authorities on ICT and security matters, including examinations, inspections, licensing interactions, and supervisory dialogue • Support entity go-live processes and establish ICT governance frameworks for new market launches • Lead ICT and security risk assessments, maintain live risk registers, and track remediation against regulatory SLAs • Own entity-level ICT policies and align them with VARA requirements, local frameworks, and group standards • Coordinate control testing, evidence documentation, audit preparation, and remediation planning • Manage classification, escalation, and regulatory reporting of ICT-related incidents • Lead business impact assessments, critical function mapping, business continuity planning, and continuity/recovery testing • Oversee ICT third-party dependencies and outsourcing arrangements • Liaise with Group Security, IT, compliance, legal, and the RISO Lead to implement local and group security frameworks • Participate in regional incident response, post-incident reviews, and continuous improvement • Represent entity priorities in group-led security initiatives and governance forums

🎯 Requirements

• 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment • Direct experience as a named regulatory contact, including regulatory examinations, supervisory interactions, licensing processes, or equivalent • Familiarity with UAE regulatory frameworks • Experience with VARA or other virtual asset / crypto-native regulatory regimes strongly preferred • Demonstrated ability to build compliance or governance programs from the ground up • Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level • Familiarity with ICT outsourcing and third-party risk management within group structures • Ability to translate technical risk into board-level narrative and regulatory-grade documentation • Ability to operate across multiple jurisdictions simultaneously • Strong project management skills and ability to drive outcomes across cross-functional, globally distributed teams • Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred • Familiarity with EU frameworks such as DORA and MiCA strongly preferred • Applicants must select the city and country from which they will work • Applicants must disclose whether they need current or future work sponsorship in their location

🏖️ Benefits

• Remote-first, international team • Exposure to C-level executives and regulators across multiple jurisdictions • Opportunity to build ICT governance programs from scratch for new market entries • Board-level visibility and accountability within a regulated entity • Opportunities for professional growth as the entity footprint and regulatory scope expand • Equal opportunity employment • Job-related skills or work-style assessments applied consistently across candidates • Criminal-history consideration consistent with the San Francisco Fair Chance Ordinance