Specialist Technology Regulations & Business Management (UAE National Role)

*Role is for UAE Nationals only Contribute to Group IT Risk and Cybersecurity at Emirates NBD Group as Specialist Technology Regulations & Business Management, supporting sound risk decisions, controlled exposures and timely remediation through risk assessments, portfolio reviews and control actions, sound controls and continuous improvement. Key Tasks:- Ensures proactive reach out and assists the business and regulators to identify opportunities and guidance from a security viewpoint. The role would lead the team to reach out and act as first contact towards the business to ensure security is perceived as an enabler. Leads the team to align with business stakeholders on possible ways to meet security challenges and promote security awareness & risk culture across the organisation, creating a culture of business security champions. Ensures early involvement of security in business projects to avoid unnecessary rework or delays. Tracks active risks via the IT Risk register and highlights the issues and the business impact on relevant stakeholders. Is a part of the business unit team and acts in a consultative way to help the business improve its security posture and adhere to security policies and expected controls. Educates and assists the business on data security controls with respect to regulations where Emirates NBD operates. AI Governance: Designs, operationalizes and continuously improves the technology-risk elements of the Group AI governance framework, ensuring AI / GenAI / agentic AI use cases are inventoried, risk-tiered, assessed and controlled across their lifecycle in line with regulatory expectations and the Group's Responsible AI principles. Regulatory Landscape & Horizon Scanning: Monitors, interprets and translates emerging technology, cyber, data, outsourcing, privacy and AI regulations (local and international) into actionable requirements, impact assessments and roadmaps for the business and Group IT. Regulatory Team Transformation: Acts as a change agent in transforming the regulatory function from a manual, reactive, compliance-checking model to a data-driven, automated and advisory model, leveraging GRC platforms, analytics and AI-enabled tooling. Support the team with external and internal audit requirements related to technology, security and data protection.

Bachelor’s degree in information technology, Computer Science, Engineering, Law or Business (Master's degree in Business Management, Technology Management or equivalent preferred) Executive education (e.g. Harvard, INSEAD) in AI strategy, digital transformation or risk management At least one of: CISM, CISSP, CRISC, CGEIT AI governance certification: IAPP AIGP, ISACA AAISM / AAIA, or ISO/IEC 42001 Lead Implementer / Lead Auditor ISO/IEC 27001 Lead Implementer / Lead Auditor Privacy certification (e.g. CIPP/E, CIPM, CDPSE) Cloud security certification (e.g. CCSK, CCSP); PCI QSA / PCI DSS v4.0 knowledge 5-8 years' experience in information security, technology risk or technology regulatory compliance, of which at least 3 years in the financial services industry Minimum 2 years' hands-on experience in AI governance, AI risk management, data governance (e.g. building AI policies, AI regulatory assessments) Deep experience in implementing regulatory controls to ensure alignment of business and IT requirements, including translation of business requirements into security requirements (and vice versa) Deep experience in communication and alignment with security teams and implementation teams Deep expertise in the current regulatory agenda and corresponding assessment methodologies across GCC and international jurisdictions Experience interacting with regulators (inspections, consultations, submissions) in the UAE / GCC Experience contributing to or leading a transformation programme (operating model, process re-engineering, GRC implementation or automation) 3 to 5 years' experience of understanding the financial industry, market and specific operations that relate to banking & finance   UAE (primary) CBUAE regulations and standards relevant to technology, cyber, outsourcing, operational resilience, consumer protection and en

Role is for UAE Nationals only Contribute to Group IT Risk and Cybersecurity at Emirates NBD Group as Specialist Technology Regulations & Business Management, supporting sound risk decisions, controlled exposures and timely remediation through risk assessments, portfolio reviews and control actions, sound controls and continuous improvement. Key Tasks:- Ensures proactive reach out and assists the business and regulators to identify opportunities and guidance from a security viewpoint. The role would lead the team to reach out and act as first contact towards the business to ensure security is perceived as an enabler. Leads the team to align with business stakeholders on possible ways to meet security challenges and promote security awareness & risk culture across the organisation, creating a culture of business security champions. Ensures early involvement of security in business projects to avoid unnecessary rework or delays. Tracks active risks via the IT Risk register and highlights the issues and the business impact on relevant stakeholders. Is a part of the business unit team and acts in a consultative way to help the business improve its security posture and adhere to security policies and expected controls. Educates and assists the business on data security controls with respect to regulations where Emirates NBD operates. AI Governance: Designs, operationalizes and continuously improves the technology-risk elements of the Group AI governance framework, ensuring AI / GenAI / agentic AI use cases are inventoried, risk-tiered, assessed and controlled across their lifecycle in line with regulatory expectations and the Group's Responsible AI principles. Regulatory Landscape & Horizon Scanning: Monitors, interprets and translates emerging technology, cyber, data, outsourcing, privacy and AI regulations (local and international) into actionable requirements, impact assessments and roadmaps for the business and Group IT. Regulatory Team Transformation: Acts as a change agent in transforming the regulatory function from a manual, reactive, compliance-checking model to a data-driven, automated and advisory model, leveraging GRC platforms, analytics and AI-enabled tooling. Support the team with external and internal audit requirements related to technology, security and data protection.