Deputy Regional Information Security Officer

📋 Description

• Prepare, contribute and report to regional risk governance and board committee meetings
• Execute risk assessments and control testing across UAE operations in line with VARA cybersecurity
• Maintain and review Business Impact Assessments (BIA), integrating findings into global resilience
• Contribute to Business Continuity Plan (BCP) documentation, testing, and updates, including
• Collaborate with Group Security and IT to align UAE-specific regulatory controls with global
• Conduct security control validation and document evidence for internal/external audits

🎯 Requirements

• 7+ years of experience in information security governance, ICT risk management, or regulatory
• Direct experience as a named regulatory contact, involvement in regulatory examinations
• Familiarity with UAE regulatory frameworks; experience with VARA or other virtual asset /
• Demonstrated ability to build compliance or governance programs from the ground up, not only to
• Experience conducting risk assessments, business impact analyses, and resilience planning at the
• Familiarity with ICT outsourcing and third-party risk management within group structures

🎁 Benefits

• Named role within a regulated entity with accountability and board-level visibility
• Operate at the frontier of virtual asset regulation, shaping how Kraken meets VARA from day one of
• Build ICT governance programs from scratch for new market entries
• Direct exposure to C-level executives and regulators across multiple jurisdictions
• The scope of the role is designed to grow, potentially including Asian and EU frameworks such as
• Join a remote-first, international team shaping the future of crypto asset governance and resilience