Talabat Looking for Senior Director of Security, CISO Talabat (all genders) at Dubai Full Time

Who are we
talabat is the leading online food ordering platform in MENA, operating in 9 countries across the region, with over 2,000+ employees, millions of users, we deliver hundreds of thousands of orders every day.
We are part of the Delivery Hero network building the next generation of online food-delivery platforms across the globe. Our network is truly international with engineering teams in 13 countries and operations in 40+ countries.
Our Tech teams leverage a diverse stack to create cutting-edge solutions to complex problems that cover the full customer experience – starting with an online search for food and ending with a delicious meal arriving at your doorstep.
Role Summary
As CISO of Talabat you are the central voice for security in the Region and responsible for Executing the security strategy, implementing the associated operating model and monitoring security risks.

• Ensuring compliance with DH security policies, and local laws & regulations.
• Managing security budgets.
• Facilitating the recruitment, retention and development of security profiles.

What’s On Your Plate
Security Strategy, Operating Model, and Risk (60%)

• Adapt and execute locally the security strategy with stakeholders across the organisation, in line with the worldwide global security strategy.
• Ensures security objectives are understood and continuously worked towards across the organization.
• Takes ownership of security decisions made across talabat.
• Collect, monitor, manage and report on security risks for talabat.
• Build DevSecOps culture and ensure security is embedded in how tech and other functions work.
• Ensure business projects undergo security validation processes.

Security Assurance & Compliance (20%):

• Ensure compliance with DH internal policies and guidelines.
• Ensure compliance with regional security laws and regulations.
• Promote security awareness and culture across talabat.
• Represent talabat and interact with local security authorities and external auditors.
• Represent talabat security in the Global Security Council, other regulatory bodies, and interact/coordinate accordingly for specific security topics in talabat.
• Evangelize the importance of security across talabat helping to shift culture where needed to a security-first mindset.

Financial Resources (10%):

• Manage and monitor the talabat security budget
• Define and implement a local security Make or Buy strategy, derived from the Global security Make or Buy strategy.

People, Talents & Competences (10%):

• Facilitate the recruitment of security profiles, in line with the local and global recruitment plans to build and grow a strong security team.
• Adapt, tailor and execute locally the corporate attractiveness & retention plan, the competence & development plan and the diversity & inclusion plan.

What Did We Order

• 12+ years of experience in security, with at least 6 years prior experience as CISO managing security teams (optimal in finance/fintech/e-commerce/ insurance sector)
• Ability to work under high workload
• Security thought leadership.
• Strong experience in building highly secured products and systems.
• Expert in different security topics (defensive, offensive, cloud sec, app sec, compliance).
• Executive level communication skills.
• Deep business acumen.
• Deep understanding of zero trust principles and architectures.
• Long Term strategic focus and ability to translate strategic business objectives to security objectives.
• Ability to build trust across organizations to grow together as a tech team.
• Ability to execute complex projects that span across the organization.
• Good understanding of agile and lean concepts.
• Ability to lead without authority creating clarity and alignment across the organization.
• Ability to find and hire the best talent.
• Ability to lead with high emotional intelligence.
• Ability to grow and mentor leaders.
• Ability to make executive-level decisions.
• Takes extreme ownership of talabat’s strategy and goals.

• Certifications:
  • CISSP
  • At least 2 cloud certifications among AWS SAA, AWS Security, GCP Cloud Engineer, GCP Cloud Security Engineer

• Nice to have:
• 1 offensive security certification, such as OSCP
• at least 2 SANS courses (GREM, GCFA, GCDA, GNFA, GCIH)