Specialist Technology Regulations & Business Management (UAE National Role)
Fa-Evlo-Saasfaprod1 Jobsearch · Dubai, UAE
*Role is for UAE Nationals only
Contribute to Group IT Risk and Cybersecurity at Emirates NBD Group as Specialist Technology Regulations & Business Management, supporting sound risk decisions, controlled exposures and timely remediation through risk assessments, portfolio reviews and control actions, sound controls and continuous improvement.
Key Tasks:-
- Ensures proactive reach out and assists the business and regulators to identify opportunities and guidance from a security viewpoint. The role would lead the team to reach out and act as first contact towards the business to ensure security is perceived as an enabler.
- Leads the team to align with business stakeholders on possible ways to meet security challenges and promote security awareness & risk culture across the organisation, creating a culture of business security champions. Ensures early involvement of security in business projects to avoid unnecessary rework or delays.
- Tracks active risks via the IT Risk register and highlights the issues and the business impact on relevant stakeholders.
- Is a part of the business unit team and acts in a consultative way to help the business improve its security posture and adhere to security policies and expected controls.
- Educates and assists the business on data security controls with respect to regulations where Emirates NBD operates.
- AI Governance: Designs, operationalizes and continuously improves the technology-risk elements of the Group AI governance framework, ensuring AI / GenAI / agentic AI use cases are inventoried, risk-tiered, assessed and controlled across their lifecycle in line with regulatory expectations and the Group's Responsible AI principles.
- Regulatory Landscape & Horizon Scanning: Monitors, interprets and translates emerging technology, cyber, data, outsourcing, privacy and AI regulations (local and international) into actionable requirements, impact assessments and roadmaps for the business and Group IT.
- Regulatory Team Transformation: Acts as a change agent in transforming the regulatory function from a manual, reactive, compliance-checking model to a data-driven, automated and advisory model, leveraging GRC platforms, analytics and AI-enabled tooling.
- Support the team with external and internal audit requirements related to technology, security and data protection.
- Assess, track and maintain regulatory compliance across the Group (local & international)
- Manage & implement local & international regulatory security standards where Emirates NBD operates
- Maintain a Group-wide regulatory register mapped to policies, controls and control owners
- Coordinate regulatory inspections, self-assessments and attestations, and track remediation to closure
- Aligning the Group Information Security Strategy to Emirates NBD business strategy
- Establish and operationalize AI Governance (technology & cyber risk)
- Develop and maintain AI governance policies, standards, procedures and control frameworks aligned to ISO/IEC 42001, NIST AI RMF and applicable regulations
- Run AI regulatory assessments covering security, privacy, data quality, bias & fairness, explainability, robustness, human oversight and third-party risk requirements
- Partner with Model Risk Management, Data Governance, Data Protection, Compliance and Legal to ensure end-to-end AI lifecycle governance and monitoring
- Provide technology-risk input to the AI Governance Committee
- Regulatory horizon scanning and change management
- Continuously monitor the evolving technology, cyber, data-privacy and AI regulatory landscape across the Group's jurisdictions
- Perform regulatory gap and impact assessments; translate requirements into business and technical requirements, control changes and remediation roadmaps
- Brief senior management and committees on upcoming regulatory changes and their business impact
- Represent the Group in regulatory consultations, industry working groups and sandboxes where appropriate
- Transform the regulatory function (Automation & analytics)
- Define and deliver the regulatory team's transformation roadmap covering operating model, processes, tooling, data and skills
- Implement and optimize GRC platforms (e.g. regulatory obligation mapping, control libraries, automated evidence collection)
- Apply data analytics and approved AI technologies (e.g. GenAI for regulation summarization and mapping) to improve efficiency, with appropriate human review
- Develop KRIs/KPIs and dashboards for regulatory and AI risk posture reporting
- Coach and upskill team members on AI, regulatory and digital skills
- Govern and track the IT Risk register
- Track the IT Risk register to ensure risks are tracked to closure, including AI and emerging technology risks.
- Highlight the business impact to senior stakeholders by extrapolating the risks from the register
- Improve Security and Responsible AI Awareness across the Group
- Identify, track and implement security KPIs across the organisation
- Conduct security awareness sessions across the Group to improve risk culture and align with regulatory requirements for the geographies where Emirates NBD operates
- Design and deliver awareness on safe and responsible use of AI, with acceptable-use and data-handling expectations
- Build lasting relationships with technical and business stakeholders to create a coherent and collaborative environment that balances security and functionality, ensuring threats that affect customer or employee data are managed effectively while the business meets its agile and quick time-to-market strategy.
- Partner with cross-functional core stakeholders within security, technology, Data & AI, business, risk, compliance & audit to influence regulatory direction and facilitate key decision points for inclusion within business requirements.
- Communicate the impact of not including regulatory requirements to stakeholders both at the technical level (technology) and at the end-user level (business).
- Act as an advisor to technology & business stakeholders by ensuring effective decision making using facts, regulatory knowledge and providing options for possible solutions to challenges.
- Bachelor’s degree in information technology, Computer Science, Engineering, Law or Business (Master's degree in Business Management, Technology Management or equivalent preferred)
- Executive education (e.g. Harvard, INSEAD) in AI strategy, digital transformation or risk management
- At least one of: CISM, CISSP, CRISC, CGEIT
- AI governance certification: IAPP AIGP, ISACA AAISM / AAIA, or ISO/IEC 42001 Lead Implementer / Lead Auditor
- ISO/IEC 27001 Lead Implementer / Lead Auditor
- Privacy certification (e.g. CIPP/E, CIPM, CDPSE)
- Cloud security certification (e.g. CCSK, CCSP); PCI QSA / PCI DSS v4.0 knowledge
- 5-8 years' experience in information security, technology risk or technology regulatory compliance, of which at least 3 years in the financial services industry
- Minimum 2 years' hands-on experience in AI governance, AI risk management, data governance (e.g. building AI policies, AI regulatory assessments)
- Deep experience in implementing regulatory controls to ensure alignment of business and IT requirements, including translation of business requirements into security requirements (and vice versa)
- Deep experience in communication and alignment with security teams and implementation teams
- Deep expertise in the current regulatory agenda and corresponding assessment methodologies across GCC and international jurisdictions
- Experience interacting with regulators (inspections, consultations, submissions) in the UAE / GCC
- Experience contributing to or leading a transformation programme (operating model, process re-engineering, GRC implementation or automation)
- 3 to 5 years' experience of understanding the financial industry, market and specific operations that relate to banking & finance
UAE (primary)
- CBUAE regulations and standards relevant to technology, cyber, outso