Chief Information Security Officer - Bahrain

Responsibilities

• Hands-on implementation of the IT Security Risk Management function for Binance Bahrain.
• Lead Security Risk Management with all stakeholders as per Security Risk Framework.
• Accountable Senior Manager to the Central Bank of Bahrain for security in Binance Bahrain.
• Work as part of the three lines of defense model to ensure funds, data and systems are secure.
• Ensure all security obligations for governance, regulatory and compliance matters are delivered.
• Hands-on delivery of the Security Risk Management accountable to The Binance Bahrain Board.
• Assist the delivery of the internal and external audits related to Technology and Security.
• Drive cyber threat & vulnerability management/penetration tests as per the regulatory framework.
• IT security risk management for new projects and/or any integration with third party vendors.
• Manage Third party integrations risk to ensure alignment with security standards and SLAs.
• Manage the local security team & contribute to continual improvement of the global department.
• Security incident management, including prompt reporting to senior management & other teams.
• Work with the Risk Function & other Departments to ensure effective and optimal Resilience. Day to Day Security Risk Management and reporting to the Bahrain executive leadership teams.
• Facilitate continual alignment to regulatory compliance obligations and international standards.

Requirements

• Fluency in English & Arabic and currently based in Bahrain.
• Track record of international company experience and cyber security in a regulatory context.
• A combination of senior management and deep cyber security experience is mandatory.
• Security community contributor either through published material or international conferences.
• Demonstrable experience in a global team with a rich multicultural fast paced environment.
• 10+ years of finance sector experience in security & technology compliance in a global firm.
• Bachelor's degree or higher in information technology, cyber security or related field.
• Track record in self motivated leadership and excellent communication and listening skills.
• Proven management of cyber security operations with hands-on implementation skills.
• Delivery of best practices for international data privacy and information security frameworks. 
• NIST Cybersecurity & Privacy Framework, ISO 27001/ISO 27701, CIS and PCI-DSS.
• Must seek excellence by default and show a passion for collaboration and team achievement.
• Demonstrable experience delivering effective business and technical security solutions. 
• A passion for the latest cyber security trends and emerging threats is essential.
• Mandatory requirement for experience engaging directly with a regulatory body and implementing regulator's recommendations.
• Certifications are a plus: ISO 27001 Lead Auditor, and/or ISC2, ISACA, GIAC, CREST.