Regional Information Security Manager – Middle East And Africa
Apex Group
Cape Town, South Africa
On-site
Manage risk exposure and compliance
Align with cyber strategy and group ciso directives
Integrate regional and global security frameworks
Manage risk exposure and compliance across GCC/Africa entities, aligning with Cyber Strategy and Group CISO directives
Job Summary
Manage risk exposure and compliance across GCC/Africa entities, aligning with Cyber Strategy and Group CISO directives.
Integrate UAE PDPL, DIFC Data Protection, Saudi SAMA Cybersecurity Framework, Saudi NCA ECC, South Africa POPIA, plus global frameworks (NIST CSF 2.0, ISO/IEC 27001, ISO 31000, COBIT 2019, PCI DSS).
High visibility within a fast-growing global organization with opportunities for professional development and hands-on learning.
Matching Summary
Manage risk exposure and compliance across GCC/Africa entities, aligning with Cyber Strategy and Group CISO directives.
Skills & Requirements
Must-have
Manage risk exposure and compliance
Align with Cyber Strategy and Group CISO directives
Integrate regional and global security frameworks
Lead RCSA and drive remediation actions
Deliver executive-level presentations
Nice-to-have
Passion for continuous learning
Positive, supportive, and collaborative work environment
Ability to be a positive disrupter
Key Requirements
10-15 years in Cyber risk/ Technical Risk /Compliance
Practical delivery across UAE PDPL, DIFC, SAMA CSF, NCA ECC, POPIA
Industry certifications advantageous (e.g., CISM/ CRISC, ISO 27001 Lead Auditor)
Good knowledge of cloud and hybrid security models (Azure, AWS, or equivalent)