Cyber Security Manager

First Tech is a technology company focused on building, scaling, and delivering innovative digital platforms across financial services and other industries.

We combine technology, product expertise, and a deep understanding of customer needs to create solutions that simplify complex processes and deliver seamless digital experiences. Our platforms are designed to be scalable, reliable, and impactful, helping businesses and customers navigate the evolving digital landscape with confidence.

Founded with a vision to accelerate digital transformation, First Tech brings together strong engineering capabilities, product development expertise, and a culture of innovation to build modern solutions that address real-world challenges.

By partnering with forward-thinking businesses and developing technology-driven products, we aim to reshape industries and improve everyday experiences. We believe in creating an inclusive, collaborative environment where talented individuals are empowered to innovate, grow, and make a meaningful impact.

Job purpose

As Group Cybersecurity Manager, you’ll lead our cybersecurity function across the Group, shaping how we protect our people, products, platforms and data across the UAE, KSA and our growing markets. This is a leadership role with a strong technical dimension, covering security architecture and engineering, cloud and application security, incident response, identity and data protection, vulnerability management, third-party risk and regulatory compliance.

What you’ll do

• Define and execute the Group cybersecurity strategy, roadmap, policies, standards and operating model.
• Own the target security architecture across cloud, infrastructure, endpoints, identity, applications, APIs, data platforms and third-party integrations.
• Embed security into product and engineering processes through secure development, DevSecOps practices, threat modelling, security testing and release controls.
• Lead cybersecurity operations, including SOC and MSSP oversight, threat detection, incident response, investigation, recovery and post-incident improvement.
• Own vulnerability and exposure management, ensuring critical risks are identified, prioritised, remediated and appropriately escalated.
• Oversee key security technologies and controls across SIEM, EDR/XDR, DLP, IAM/PAM, MFA, WAF, encryption, cloud security and related capabilities.
• Ensure compliance with applicable cybersecurity and regulatory requirements across the UAE and KSA, supporting audits, assessments and regulatory examinations.
• Manage cybersecurity risks associated with vendors, technology partners, third parties and the software supply chain.
• Build and develop the cybersecurity team and security champion network while partnering closely with Engineering, Product, IT, Data, Compliance, Legal, Risk and other stakeholders.
• Provide clear cybersecurity reporting and risk advice to senior leadership, covering incidents, vulnerabilities, compliance, control effectiveness and roadmap progress.
• Own cybersecurity budget planning, technology investments and vendor performance within delegated authority.
• Continuously assess emerging threats, technologies and industry practices to strengthen the Group’s cybersecurity maturity and resilience.

What we’re looking for

• 10+ years of progressive cybersecurity experience, including at least 4 years in cybersecurity leadership, architecture, security operations, engineering or incident response.
• A bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Engineering or a related discipline. A relevant master’s degree is an advantage.
• CISSP or CISM is strongly preferred. Additional certifications such as CCSP, GIAC, OSCP, SABSA, ISO 27001 or cloud security certifications are advantageous.
• Proven experience defining and executing cybersecurity strategy and building or transforming cybersecurity capabilities within an organisation.
• Strong technical experience across cloud security, application and product security, identity, data protection, infrastructure security, SOC operations, incident response and vulnerability management.
• Experience securing software or digital platforms and implementing secure development and DevSecOps practices.
• Practical experience with cybersecurity regulation, risk management and audits in the UAE and KSA, ideally within insurance, financial services, government or another regulated technology environment.
• Experience leading cybersecurity teams and managing MSSPs, vendors, consultants, budgets and major security programmes.
• Strong security architecture, analytical, troubleshooting and risk-prioritisation capabilities, with the ability to operate at both strategic and hands-on technical levels.
• Strong judgement and decision-making skills, particularly when managing cybersecurity incidents and material risks under pressure.
• Excellent communication and stakeholder management skills, with the ability to translate complex cybersecurity risks and requirements for executives and non-technical audiences.

Benefits

• Competitive salary and performance-based incentives
• Health and wellness support
• Career development and learning opportunities
• Exposure to high-impact projects and cross-functional teams
• A collaborative culture that encourages innovation and ownership

So, what does it really mean to work at First.Tech?

We are building a company where people are empowered to do their best work and grow. Our culture is rooted in ownership, collaboration, and continuous learning.

As part of First Tech, you will be working in an environment that values innovation, speed, and impact, while giving you the opportunity to shape products that directly affect how people experience financial services.

We are an equal opportunity employer and are committed to building a diverse and inclusive team. We welcome people from all backgrounds and encourage you to apply if this role excites you.