Required skills
- Information Security Management
- GRC
- IT Risk
- Financial Sector Regulation
- ISMS Implementation
- ISO 27001
- NIST CSF
- Governance Structures
- Identity & Access Management
- Vulnerability Management
- Incident Management
- Business Continuity Management
- Crisis Management
- Risk Assessment
- Policy Development
- Regulatory Compliance
- CISM
- CRISC
Languages: German
Job description
A German IT security service provider is seeking a Freelance Information Security Manager for a project in Abu Dhabi to rebuild a bank's security organization after a major incident. The role involves establishing an ISMS, implementing governance structures, and aligning with regulatory requirements.
Project overview
A German service provider, specializing exclusively in information security, is currently assisting a major bank in Abu Dhabi in managing a serious security incident. The assignment ranges from containment and forensic analysis to rebuilding the security organization.
As a Freelance Information Security Manager, you will translate the findings from the incident into robust security governance. You will build an ISMS that can withstand regulatory scrutiny and structurally hinder the next attack.
Responsibilities
What you bring:
- Translate root cause findings from the incident into prioritized risk assessments and action plans
- BCM
- Build the ISMS based on a gap analysis against ISO/IEC 27001 and NIST CSF
- Establish governance structures with clear roles, security committees, and reporting lines to the board
- Create policies and standards for Identity & Access Management, privileged access, logging, vulnerability management, and third-party risk
- Map measures to the requirements of the Central Bank of the UAE, the UAE Information Assurance Standards, and SWIFT CSCF
- Re-establish processes for incident management, business continuity, and crisis management
- Prepare for regulatory audits and coordinate closely with Incident Response and Detection Engineering
- Completed degree or vocational training with corresponding professional experience
- Several years of experience in information security, GRC, or IT risk in the regulated financial sector
- Sound knowledge of regulatory requirements such as DORA, MaRisk, BAIT, or comparable international banking regulations
- Experience in building an ISMS, not just operating an existing one
- Confidence in dealing with the board, audit, and supervisory authorities
- Certifications such as ISO 27001 Lead Implementer, CISM, or CRISC are an advantage
- Very good German and business fluent English skills
Project details
- Start: ab sofort
- Remote: remote
- Location: Deutschland, Deutschland, DE
- Languages: German
Source notes
Are you interested? Then we look forward to receiving your application documents and are available for an initial conversation to answer any questions.
- Build security governance in a bank after a major incident, with full management attention
- Full-time engagement for a project duration of 3 to 6 months
- Rotation model with two alternating teams: two weeks in Abu Dhabi, two weeks in Germany
- Full coverage of all travel expenses
- Option for permanent employment, including unlimited vacation
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap DE