← All roles

Deputy Regional Information Security Officer

Kraken· Security & IT
Apply on company site
RemoteFull-timePosted 2w ago

About the role

Deputy Regional Information Security Officer responsible for ICT security, operational resilience, and regulatory compliance across UAE entities, acting as the named security officer at the entity level with board and regulator accountability.

Responsibilities

  • Prepare, contribute and report to regional risk governance and board committee meetings, highlighting control status, risk exposure, and readiness
  • Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity guidelines and security best practices
  • Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience planning
  • Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including entity-specific scenarios
  • Collaborate with Group Security and IT to: Align UAE-specific regulatory controls with global policies and control frameworks; Contribute to the development of security policies to meet international and UAE compliance requirements
  • Conduct security control validation and document evidence for internal/external audits
  • Participate in remediation planning for audit findings and track progress to closure
  • Support the RISO in preparing and submitting regulatory documentation to regulators
  • Prepare and present security and resilience reports for internal governance committees and local entity management
  • Assist in responses to regulatory examinations, including due diligence and compliance queries
  • Liaise with compliance and legal teams to interpret regulatory changes and propose control adaptations
  • Participate in the regional incident response process, assist with post-incident reviews, and support continuous improvement activities
  • Coordinate with cross-functional stakeholders to embed security requirements into operational processes

Qualifications

  • 7+ years of experience in information security governance, ICT risk management, or regulatory compliance in a regulated financial services, fintech, or virtual asset environment
  • Direct experience as a named regulatory contact, involvement in regulatory examinations, supervisory interactions, licensing processes, or equivalent
  • Familiarity with UAE regulatory frameworks. Experience with VARA or other virtual asset / crypto-native regulatory regimes is a significant advantage and strongly preferred
  • Demonstrated ability to implement, adapt, and maintain compliance or governance frameworks within a regulated environment
  • Experience conducting risk assessments, business impact analyses, and resilience planning at the entity level
  • Familiarity with ICT outsourcing and third-party risk management within group structures
  • Ability to translate technical risk into board-level narrative and regulatory-grade documentation
  • Comfortable operating across multiple jurisdictions simultaneously, each at a different stage of regulatory maturity
  • Strong project management skills and the ability to drive outcomes across cross-functional, globally distributed teams
  • Certifications such as CISSP, CISM, CRISC, CISA, or ISO27001 Lead Implementer preferred
  • Familiarity with EU frameworks such as DORA and MiCA is strongly preferred

Skills

Required:ICT governanceRegulatory engagementRisk assessmentsBusiness continuity planning
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Kraken

setter-30setter-30-2026-q1
Company profileWebsite

More open roles at Kraken