Information Security Manager – MEA

About the role

The Information Security Manager will lead the MEA technical risk team for Apex Group, ensuring security engineering and regulatory compliance across the Middle East and Africa region. The role aligns local practices with the Group CISO’s cyber strategy and global frameworks.

Key responsibilities

• Govern security engineering against UAE PDPL, DIFC Data Protection, Saudi SAMA Cybersecurity Framework, NCA Essential Cybersecurity Controls, and South Africa POPIA.
• Map regional controls to Apex Gold Standard, NIST CSF 2.0, ISO/IEC 27001:2022, ISO 31000, COBIT 2019 and maintain PCI DSS v4.0 readiness.
• Define and monitor MEA KRIs/KPIs, lead the regional RCSA, drive remediation and publish Technology Risk Forum packs.
• Coordinate with local regulators, business heads and technology stakeholders, delivering concise executive‑level presentations.
• Ensure ongoing compliance with global and regional cybersecurity frameworks and report on risk appetite.

Required profile

• Proven experience in information security and regulatory compliance within financial services or similar regulated environments.
• Demonstrated ability to manage multi‑jurisdictional security frameworks and lead risk assessment processes.
• Strong stakeholder management and communication skills for interaction with regulators and senior business leaders.

Required skills

• NIST CSF 2.0
• ISO/IEC 27001:2022
• ISO 31000
• COBIT 2019
• PCI DSS v4.0
• UAE Personal Data Protection Law (PDPL)
• DIFC Data Protection regulations
• Saudi SAMA Cybersecurity Framework
• NCA Essential Cybersecurity Controls (ECC)
• South Africa POPIA