Vice President – Information Security

🔥 1 minute ago

🇮🇳 India – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Mashreq

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1967

🏦 Banking

💸 Finance

💳 Fintech

Banking • Finance • Fintech

Mashreq is a leading financial institution based in the UAE, offering a wide range of banking services including personal, corporate, and investment banking. The bank focuses on providing innovative financial solutions to its customers and has a strong digital banking presence.

📋 Description

• Define and execute the ISG GRC strategy and operating model aligned to enterprise risk appetite and regulatory expectations • Lead annual and multi-year GRC roadmap planning with measurable outcomes and maturity targets • Embed common control, risk, and compliance frameworks across ISG and technology domains • Advise senior business leaders on risk-based decisions and govern cyber risk reporting for board-level visibility • Own ISG GRC operating and capital budgets, including automation investments, and track ROI • Provide executive oversight of Information Security regulatory compliance across jurisdictions • Lead regulatory engagements, inspections, examinations, submissions, responses, and attestations • Govern regulatory interpretation, applicability decisions, implementation tracking, and regulatory calendars • Provide strategic oversight for PCI-DSS, SWIFT CSP, NESA IAS, and ISO 27001 programs • Govern information security incident management, regulatory notifications, reporting, and post-incident remediation • Oversee technology risk remediation, audit findings, regulatory issues, and technology risk gaps • Drive automation of regulatory compliance, risk assessment, control assurance, and reporting, including AI-assisted and workflow-driven GRC solutions • Design, maintain, and govern a global Common Control Framework with traceability between risks, controls, regulations, and evidence • Ensure global consistency of Information Security governance while respecting local regulatory requirements • Chair or represent ISG in enterprise governance forums and risk committees • Sponsor and oversee spot checks, floor visits, and on-site assurance activities • Establish and govern offshore delivery models for Information Security GRC services • Own and evolve the Information Security Risk Management Framework and integrate InfoSec risks into enterprise risk management • Govern risk exceptions, risk assessments, control self-assessments, and initiative/location/technology risk assessments • Oversee third-party and supplier Information Security risk management, continuous monitoring, breach events, and remediation commitments • Present the global GRC roadmap to senior leadership and the Board and drive strategic initiatives across regions

🎯 Requirements

• Overall 14+ years of experience, including 4–5 years in InfoSec GRC • Proven ability to lead enterprise-level projects and influence senior and executive stakeholders • Deep knowledge across Information Security and Cyber Security disciplines, including governance, policy development, compliance, risk management, and incident response • Extensive experience in banking or financial services • Strong understanding of regulatory requirements and security frameworks such as ISO 27001 series, NIST 800 series, PCI-DSS, SWIFT CSP, and COBIT • Solid grasp of evolving technology stacks, associated risks, and control environments • Expertise in conducting complex risk assessments and translating findings into actionable strategies aligned with enterprise risk appetite • Strong analytical and prioritization skills, with the ability to make high-impact decisions under complex scenarios • Exceptional communication and stakeholder engagement capabilities • Master’s degree in information technology, Information Security, or related discipline • Professional certifications such as CISA, CISM, CRISC, or CISSP equivalent are highly desirable

🏖️ Benefits

• No benefits, perks, or compensation extras are specified in the posting