Job Description
Mashreq is seeking an experienced and strategic Head of Information Security International to lead and oversee information security operations across its international network, including the USA, Egypt, Qatar, Bahrain, Kuwait, Pakistan, India, the United Kingdom, and Hong Kong. This role is responsible for ensuring alignment between regional information security functions and Mashreq's global security strategy, regulatory obligations, and risk management framework.
The successful candidate will provide leadership to regional Information Security teams, drive governance and compliance initiatives, manage international security risks, and act as the Information Security lead for Mashreq's London and Hong Kong businesses. This is a senior leadership opportunity for a cybersecurity professional with extensive international banking experience and a strong understanding of global security, regulatory, and data protection frameworks.
Key Responsibilities
1. Develop and execute a rolling multi-year Information Security roadmap for international operations, aligned with Mashreq's global security strategy and business objectives.
2. Lead and manage regional Information Security teams across multiple countries, ensuring consistent standards while accommodating local regulatory and operational requirements.
3. Establish and maintain governance frameworks, security policies, standards, and procedures across international entities.
4. Identify, assess, report, and drive remediation of information security and cyber risks across all international operations.
5. Ensure compliance with local and international regulatory requirements, security standards, and data privacy laws across all jurisdictions.
6. Act as the Information Security lead for Mashreq's London and Hong Kong businesses, providing oversight on regulatory compliance, cybersecurity, data protection, and security governance.
7. Oversee regulatory examinations, security assessments, audits, and remediation programs, ensuring timely closure of findings and issues.
8. Partner with business, technology, risk, compliance, legal, human resources, and audit teams to embed security controls and strengthen organizational resilience.
9. Drive the implementation and enhancement of key cybersecurity capabilities including incident response, third-party risk management, security monitoring, and cyber resilience programs.
10. Manage international Information Security budgets, strategic initiatives, and transformation programs, ensuring delivery within agreed timelines, scope, and budget.
Experience, Skills & Qualifications
1. Bachelor's degree in Information Security, Cyber Security, Computer Science, Information Technology, or a related discipline.
2. Minimum 14 years of information security experience, including at least 5 years leading international security teams within a large multinational organization.
3. Strong experience within the banking or financial services sector, with exposure to complex regulatory and risk environments.
4. Proven track record of leading enterprise-wide cybersecurity and information security programs across multiple jurisdictions.
5. Experience managing global, virtual, and culturally diverse teams across multiple regions and time zones.
6. Strong knowledge of information security frameworks and standards including ISO 27001, NIST, COBIT, SABSA, CIS Controls, and PCI DSS.
7. In-depth understanding of global cybersecurity and data privacy regulations such as GDPR, HKMA, FFIEC, NYDFS, RBI Cyber Security Framework, PDPL, and related regulatory requirements.
8. Strong expertise in information security governance, risk management, incident response, third-party risk management, and security operations.
9. Professional certifications such as CISSP, CISM, CISA, GIAC/SANS certifications, or equivalent are highly preferred.
10. Exceptional leadership, stakeholder management, communication, analytical, decision-making, and strategic planning capabilities.
