Deputy Regional Information Security Officer
Kraken · Remote · United Arab Emirates ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- Senior level role
- VARA regulatory focus
- Board-level accountability
- Crypto & Fintech
You will own ICT security, operational resilience, and regulatory compliance for Payward’s UAE operations. As the named security officer, you are accountable to local boards and regulators, bridging global frameworks with local requirements.
The role requires executing risk assessments, maintaining business continuity plans, and acting as the primary contact for authorities like VARA. You will collaborate with Group Security to adapt policies and drive remediation efforts.
What you'll do
- Serve as named ICT security officer with board-level accountability
- Act as primary contact for VARA and other regulatory authorities
- Execute risk assessments and control testing per UAE guidelines
- Maintain Business Impact Assessments and Continuity Plans
- Prepare security reports for internal governance committees
- Coordinate audit evidence documentation and remediation planning
- Manage classification and reporting of ICT-related incidents
- Liaise with compliance teams to interpret regulatory changes
What you'll need
- 7+ years in infosec governance or regulatory compliance
- Experience in regulated financial services or virtual assets
- Direct experience as a named regulatory contact
- Familiarity with UAE regulatory frameworks and VARA
- Ability to implement governance frameworks in regulated environments
- Experience with ICT outsourcing and third-party risk management
- Strong project management skills for cross-functional teams
- Certifications like CISSP, CISM, or ISO27001 preferred
Nice to have
- Experience with VARA or crypto-native regulatory regimes
- Familiarity with EU frameworks such as DORA and MiCA
- Background in launching new market entries
How you'll work
- Fully remote position
- International team environment
- Focus on UAE entity operations
What you get
- Named role with high visibility and trust
- Remote-first international culture
- Opportunity to shape crypto asset governance
- Exposure to evolving regulatory frameworks
Hiring process
- Application review on ongoing basis
- Job-related skills or work-style assessments
- Interviews and competency evaluation