Information Security Manager – Kuwait

About the role

The Information Security Manager will lead FAB Kuwait’s Information Security, Business Continuity and Data Privacy programmes. Reporting to the Head of Risk – Kuwait and functionally to the Group Head of International Information Security, the role ensures that security, privacy and continuity controls meet regulatory and business requirements.

Key responsibilities

• Review, maintain and update Information Security, Business Continuity and Data Privacy policies, standards and procedures.
• Coordinate with local business units, IT, compliance, and the Group Security Office on security initiatives and regulatory compliance.
• Provide regular reports on security posture, risk assessments, incidents and audit findings to executive management.
• Liaise with regulators, law‑enforcement and external agencies to stay abreast of emerging threats.
• Monitor new legislation, communicate changes, and develop action plans for implementation.
• Assist head office during regulatory examinations and ensure timely remediation of observations.
• Review technology risk assessments, third‑party and facility risk assessments, and support internal and external audits.
• Oversee the security awareness programme for staff and customers and support the CSIRT and Group Data Privacy teams.

Required profile

• Proven experience managing information security, business continuity and data privacy programmes in a banking or financial services environment.
• Strong knowledge of regulatory requirements related to information security, personal data protection and third‑party risk.
• Ability to interact with senior management, regulators and external agencies.
• Excellent analytical and reporting skills.

Required skills

What we offer

• Opportunity to shape the security strategy of a leading bank in Kuwait.
• Collaborative environment with direct access to senior leadership.