Chief Information Security Officer (CISO) - UAE

Responsibilities

• Lead design and delivery of the UAE information security strategy and governance.
• Implement and operate IT Security Risk Management aligned to UAE regulatory requirements.
• Develop and maintain security policies, standards, and controls mapped to ISO/NIST/CIS frameworks.
• Act as primary security liaison with UAE regulators; prepare regulatory reports and responses.
• Lead cybersecurity risk assessments, threat modelling, penetration testing and incident response.
• Oversee third-party security assessments, integrations and vendor risk management.
• Provide board-level updates, audit support, and regulatory reporting related to security.
• Build, mentor and grow a local security team while coordinating with global security functions.
• Drive resilience and secure development practices across products and platforms.

Requirements

• Based in UAE
• Arabic required
• English fluent
• 10+ years
• Cybersecurity leadership
• Fintech experience
• Regulatory experience
• Risk management
• Audit experience
• Cloud security
• Pen testing
• CISSP/CISM

Preferred Qualifications

• Experience in regulated financial institutions or licensed virtual asset providers
• Hands-on background with incident response and threat-hunting programs
• Familiarity with ISO 27001/27701, NIST CSF, PCI-DSS and CIS controls
• Certifications such as CISSP, CISM, CIPP, CEH, GIAC or CREST
• Proven track record engaging UAE regulatory bodies and delivering remediation plans
• Experience scaling security teams in fast-paced global organisations

Benefits

• Competitive salary and compensation package
• Annual leave and paid leave
• Health / medical insurance
• Visa support
• Remote / flexible working options
• Professional development and certification support

About the Company

Binance is a global blockchain ecosystem and cryptocurrency exchange serving users worldwide. The UAE CISO will lead security and compliance for Binance's UAE operations, working closely with local regulators and global security teams to protect customer assets and data while enabling compliant growth of virtual asset services in the region.