Senior Security and Compliance Officer

Responsibilities

• Lead the end-to-end implementation and oversight of information security governance, risk management, and compliance (GRC) initiatives.
• Manage full lifecycle compliance with ISO/IEC 27001, PCI DSS v4.0.1, NIST, UAE PDPL, and UAE Central Bank regulations.
• Develop, review, and maintain information security policies, procedures, and governance documents.
• Lead technology and information security risk assessments and maintain centralized risk registers.
• Plan and manage audits, inspections, regulatory assessments, and certifications.
• Own the PCI DSS compliance program, including scoping, assessment coordination, and remediation.
• Perform third-party risk assessments to ensure contractual compliance with InfoSec and PCI DSS requirements.
• Design and manage security awareness and training programs via LMS platforms.

Requirements

• Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.
• 8+ years of experience in Information Security GRC roles.
• Proven experience working within banking, fintech, or other highly regulated sectors.
• Deep knowledge of ISO/IEC 27001, PCI DSS, NIST, and UAE PDPL frameworks.
• Strong documentation, analytical, and stakeholder engagement capabilities.

Preferred Qualifications

• Relevant professional certifications such as CISSP, CISM, CRISC, ISO 27001 LA/LI, or PCI DSS.

About the Company

Emaratech is a leading technology provider dedicated to delivering innovative digital solutions within highly regulated environments.