VP Information Security BCM & Data Privacy📣 إعلان

About the Role

First Abu Dhabi Bank (FAB) is seeking a VP Information Security BCM & Data Privacy to join their team in Riyadh, Saudi Arabia. This full-time role involves assisting the Country CRO and leading FAB KSA’s Cybersecurity, Business Continuity Management (BCM), and Data Privacy functions, acting as the Chief Information Security Officer (CISO) for the KSA franchise.

Key Responsibilities

• Establish and operate a robust cybersecurity governance program compliant with SAMA Cybersecurity Framework (CSF), PDPL, and NCA controls.
• Define, communicate, and maintain the KSA Cybersecurity Strategy and Policy framework, aligned with SAMA CSF domains.
• Manage the Information Security & Business Continuity framework for Country and Group Risk & Compliance Committee.
• Assist in the formulation, implementation, and delivery of FAB KSA’s Risk, Cybersecurity, and BCM strategies.
• Develop and implement risk policies for Information Security, Business Continuity, and Data Privacy.
• Manage data classification, risk categorization, and conduct risk assessments for information assets.
• Ensure regulatory compliance with SAMA CSF, NCA, and other applicable regulations, including managing evidence repositories and self-assessment maturity reporting.
• Establish and rigorously test business continuity plans across all departments, including crisis management plan simulations.
• Own the Cybersecurity Incident Response Plan, leading incident coordination, forensics, and recovery efforts.
• Develop and implement data privacy strategies, acting as the primary point of contact for data protection issues.
• Integrate cybersecurity into project and change governance, performing security assessments for new initiatives.
• Coordinate with the Group Security awareness team to develop and implement role-based awareness and training programs.

Cybersecurity Leadership and Governance

The role involves establishing and maintaining a cybersecurity governance structure endorsed by senior management, complete with clear charters, roles, and decision rights. This includes working closely with Group Risk Management units to ensure Group methodologies, policies, and procedures are established and consistently applied within KSA. The VP will also implement control frameworks and continuously improve maturity levels across governance, risk management, operations, and third-party security.

Risk Management and Compliance

A core aspect of this position is developing a comprehensive Risk Review mechanism for information security policies and procedures to ensure consistency, comprehensiveness, and adequacy. This includes managing information risk assessments, overseeing penetration test results, and identifying potential legal and regulatory issues affecting information security. The VP will also ensure continuous monitoring and logging, maintaining SOC capabilities for event detection, triage, and escalation.

Data Privacy Management

This role is responsible for developing and implementing data privacy strategies, ensuring FAB’s policies and procedures comply with the Personal Data Privacy Law (PDPL) and relevant codes of practice. Key activities include evaluating existing data privacy controls, rectifying non-compliance issues, advising on data privacy matters, and promoting a culture of data privacy compliance through training and proactive audits. The VP will also maintain records of data processing activities and monitor changes to local privacy laws.

Qualifications and Experience

• Over 10 years of relevant experience in information security, business continuity management, and data privacy.
• Demonstrated ability to establish and operate robust cybersecurity governance programs.
• Experience with Saudi Central Bank (SAMA) Cybersecurity Framework (CSF) requirements and other applicable laws and regulations such as PDPL and NCA controls.
• Strong understanding of risk management frameworks and methodologies.
• Proven leadership skills in managing cybersecurity, BCM, and data privacy functions.