Executive Manager - Squad Cyber Technical Lead

We are seeking an **Executive Manager – Squad Cyber Technical Lead** to lead the delivery of a cybersecurity squad across four key workstreams: **Application Security (AppSec), AI Governance, Continuous Security Validation, and Compliance \& Evidence Management**. The role will ensure delivery is aligned with **2nd Line of Defense (2LoD) approved policies**, defined SLAs, regulatory requirements, and **CBUAE inspection\-readiness**. The successful candidate will provide technical leadership across DevSecOps, cloud security, and AI/LLM security within a highly regulated banking environment. ### **Key Responsibilities** * Lead and oversee delivery across **AppSec, AI Governance, Continuous Security Validation, and Compliance Trail** workstreams. * Ensure adherence to approved security policies, controls, SLAs, and regulatory requirements. * Own and manage the consolidated **cybersecurity tooling ecosystem**, including tools such as SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, and AWS Security Hub. * Drive **vendor consolidation, tooling integration, and security architecture** across the technology landscape. * Establish and maintain an end\-to\-end **security evidence and attestation framework**, including the DefectDojo Attestation Power BI reporting chain. * Act as the **1st Line of Defense (1LoD) technical counterpart** to 2LoD Risk/Compliance and the AI Centre of Excellence. * Chair the **Security Champions Guild** and drive collaboration, knowledge sharing, and security adoption across engineering teams. * Resolve cross\-workstream priorities, dependencies, risks, and technical challenges. * Prepare and present the **monthly DevSecOps Governance Dashboard** to 2LoD stakeholders. * Ensure continuous **regulatory and audit readiness**, with a strong focus on CBUAE requirements and inspection preparedness. * Drive implementation of security controls across cloud, application, AI/ML, and DevSecOps environments. ### **Required Experience \& Expertise** * Strong experience in **Cybersecurity Engineering and technical leadership**, with proven expertise across: * DevSecOps and Application Security * Cloud Security across **Azure and AWS** * AI/ML and **LLM Security \& Governance** * Security validation, compliance, and assurance * Significant experience within **banking or other highly regulated industries** is essential. * Hands\-on experience implementing and operating security controls in a **3 Lines of Defense (3LoD) model**, particularly within 1LoD. * Proven ability to work effectively with **2LoD** on security policies, risk, assurance, controls, and independent testing. * Strong understanding and practical experience with applicable regulatory and security frameworks, including: * **CBUAE Decree\-Law No. 6 of 2025** * CBUAE **Enabling Technologies Guidelines** * CBUAE **AI/ML Guidance Note** * **NIST AI Risk Management Framework (AI RMF)** * **ISO/IEC 42001** * Experience managing cybersecurity tooling, security integrations, evidence management, and governance reporting. ### **Mandatory Certifications** * **CISSP – Mandatory** * One of the following: * **CCSP** * AWS Certified Security – Specialty * Microsoft Azure Security Engineer Associate * **CISM** or **ISO/IEC 42001 Lead Implementer** * **Certified DevSecOps Professional (CDP)** or equivalent certification ### **Desirable Certifications** * **SABSA** * **GIAC GCSA** **Skills:** Cybersecurity Engineering , DevSecOps , Cloud Security