• Operate squad's 4‑workstream delivery (AppSec / AI Governance / Continuous Security Validation / Compliance Trail) against 2LoD approved policies, with measurable SLA adherence and CBUAE inspection‑readiness.
• Own the consolidated tooling stack (e.g., SonarQube, Snyk, ServiceNow IRM, Security Agent, Claude, Codex, OPA, Microsoft Defender for Cloud, AWS Security Hub) – vendor consolidation, integration architecture, and DefectDojo→Attestation→Power BI evidence chain.
• Act as 1LoD counterpart to 2LoD and AI CoE – chairing the Security Champions Guild, arbitrating cross‑workstream priorities, and presenting the monthly DevSecOps Governance Dashboard to 2LoD.

Banking or regulated‑industry experience essential, including hands‑on delivery against CBUAE (Decree‑Law 6/2025, Enabling Technologies Guidelines, AI/ML Guidance Note), NIST AI RMF and ISO/IEC 42001.

Demonstrated experience operating wi...