Senior Manager, Technology Regulations and Business Management

The purpose of the role is to support the organization (Group IT) in its Group wide Regulatory Compliance management, Security Culture, Enterprise Technology Risk (audit & operational risk) and governance activities. The role also contributes to the development, implementation, and maintenance of ENBD’s standards, framework and processes related to regulatory compliance, awareness, and enterprise technology risk (audit & OpsRisk) across the Group and the regions we operate.

The purpose of the role is to support the Emirates NBD Group in its global regulatory compliance management, security culture, enterprise risk (audit, operational & technology risk), AI compliance, and other governance activities. The role also contributes to the development, implementation, and maintenance of ENBD's standards, framework and processes related to regulatory compliance, awareness, enterprise risk, audit and AI governance across the Group and the regions we operate.

This unit is responsible for facilitating the analysis, preparing the mitigation plans and tracking variances and periodically following through to reduce the backlog and presenting the Enterprise Technology Risk updates (audit & OpsRisk), AI governance assessments, and regulatory compliance levels of the Group across the organization. This unit also ensures that best practices and benchmarks are applied for maintaining better adherence to strive towards the objectives of a global technology leader.

- Facilitate the management of regulatory compliance and ensure that the organization complies with relevant laws and regulations related to cybersecurity, privacy, outsourcing and AI. Ensure that all regulations are tracked and updated.

- Facilitate the management of security culture across the Group and promote security awareness with continuous improvement as per the KPIs/KRIs

- Facilitate the management of AI governance frameworks, including responsible AI principles, and compliance with AI-related regulatory requirements.

- Facilitate the governance of the technology Risk registers and highlights the risks and the business impact to relevant stakeholders whilst proactively identifying security deficiencies or opportunities for improvement through the development of pragmatic solutions.

- Facilitate both internal and external audits and track them for closure with corrective actions in place - acting as a single point of contact and building reports and updates periodically.

- Facilitate with regulatory bodies to collect requirements and meet regulatory requirements to their various standards related to cybersecurity and technology.

- Facilitate cohesiveness in bridging the gap between audit, risk, and regulatory compliance activities within Group Information Security by enabling a single pane of glass of all related issues and gaps.

Responsibilities
JOB PURPOSE

- Contribute for the definition of vision for the team and play a key role for the implementation of strategic plans related to Regulatory Compliance and audits, Enterprise Technology Risk (audit, risk) and AI governance for the organization.

- Manage the governance of the IT Threat register/Audit Register and highlights the risks and the business impact to relevant stakeholders.

- Development and Implementation of Enterprise Technology Risk (audit, risk) and regulatory compliance frameworks for the strategic positioning for the process.

- Develop and maintain AI governance frameworks, AI regulatory assessments, and responsible AI policies aligned with ENBD's strategic objectives and regulatory requirements.

- Collaborate with Internal Audit to conduct IT audits in a timely manner and ensure follow-up of open issues are rectified as per agreed action timelines and report any non-compliances to senior stakeholders.

- Collaborate with external auditors to ensure IT and Infosec Audits are performed in a systematic approach.

- Support regulatory audits and external audit coordination, documentation, evidence management, and closure tracking across technology and security domains.

- Present the outcome as a summary of pending audit/risk/regulatory compliance issues to senior management on a regular basis.

- Single point of contact for all external audits to coordinate the efforts and measures needed to drive the audit.

- Ensure Policies, Standards, Procedures undergo internal quality checks and manages the lifecycle of the related documents.

- She/he will align with business stakeholders on possible ways to meet security challenges and promote security awareness & security culture across the organization. Creating the culture of business security champions to develop awareness across the organization. She/he ensures early involvement of security in business projects to avoid unnecessary rework or delays

- Manage the various global and regional regulatory frameworks, data privacy, outsourcing and AI requirements, which the Group must adhere to such as UAE IA, MAS TRM, SAMA CSF, RBI Guidelines, PCI DSS, SWIFT, ISO 27001, SOC2, NIST, CPR, CBUAE guidance etc.

- Translating regulatory requirements into business outcomes required for the data security and privacy programs.

- Support the team with enhancements in the areas of regulatory compliance management automation and security culture initiatives.

KEY RESULTS

- Assess, track, drive and maintain regulatory compliance across the Group (local & international)

- Govern and track the Technology Risk register

- Internal and External Audit coordination

- Stakeholder Management

- Improve Security Awareness across the Group

- Publish the Enterprise Technology Risk and Audit dashboards at an agreed frequency to Management.

- Establish and govern AI Governance and Regulatory Assessments

Qualifications
KNOWLEDGE AREAS

- Methodologies and practices: Deep experience in alignment of business and IT requirements including translation of business requirements into security requirements (vice versa).

- Deep experience in communication and alignment with security teams and implementation teams. Deep expertise on current regulatory agenda and corresponding assessment methodologies.

- Business acumen: Deep general banking and business area knowledge is necessary in order to identify the right solutions for business and to steer the implementation teams into the right direction as well as making sure that a proper relationship to the business side is established.

- Regulatory Compliance Management, Enterprise Risk Management, Audit methodologies, AI Governance, Security frameworks/ Security Culture.

SKILL AREAS

- Technical background covering heterogeneous technologies and multiple security domains

- Competence in the use/customization of GRC tools

- Deep knowledge of security frameworks and how to embed them into business requirements

- Knowledge required of security controls, typical pitfalls and required measures for security compliance. Deep experience of the current new and emerging technologies backbone and available technologies within the security space

- Deep expertise in testing IT, information security and AI controls against regulatory requirements (including CBUAE, DFSA, RBI, MAS and SAMA) and industry best practices, across key domains (inclusive but not limited to Asset Security, IAM, Security Assessment and Testing, Secure SDLC, etc.)

- Deep Knowledge of regulations and standards related to security, technology, privacy, outsourcing and AI including UAE IA, MAS TRM, SAMA CSF, NCA regulations, RBI Guidelines, PCI DSS, SWIFT, ISO 27001, SOC2, NIST, CPR, CBUAE guidance, AI/ML etc.

BEHAVIOURS

- Collaborative leadership style that involves a mix of resource & project planning along with delegation, decision making & conflict resolution (Management)

- Superior verbal & written communication skills (Management)

- Good presentation skills (Management)

- Business, Technical & Audit Stakeholder Management skills (Management)

- Negotiation Skills (Management)

WORK EXPERIENCE

- 10-15+ years’ experience in the Information Security domain of which at least 3 years in the financial industry

- Business acumen: Experience of 3 years understanding the financial industry, technologies and specific operations that relate to banking & finance

EDUCATIONAL QUALIFICATIONS

- University degree or equivalent work experience required.

- Master’s Degree in Business Management or equivalent desired.

PROFESSIONAL QUALIFICATIONS/MEMBERSHIPS

- ISO 27001 Lead Implementer/Auditor

- ITIL Foundation

- CISA/CRISC/CISM/CISSP

- CIPP/CIPM/CIPT

- AIGP or other AI credentials

LOCATION

- Bangalore-based role.

There’s never been a better time to join Emirates NBD.
We’re one of the region’s most recognizable brands. We’re banking innovation leaders. We’re growing across both the UAE and our global offices. We offer a huge range of professional development opportunities to accelerate your career.

It also goes without saying that we provide extremely competitive rewards, benefits and perks too, like our flexible work policy so you can work from home whenever it suits.

At ENBD, we encourage interested candidates to review the key responsibilities and qualifications for each role and apply for positions that match their skills and capabilities.

#LI-JS1