Assistant Manager InfoSec Programme And Change Management

Network International is the leading enabler of digital commerce across the Middle East and Africa, providing payment technology and services to banks, merchants, fintechs and governments.

Network Internationals Information Security function runs a broad, multi-workstream security programme spanning Cyber Resilience Operations, Governance, Risk & Compliance, Security Architecture & Engineering and AI & Data Security Governance. This role is the dedicated programme discipline behind that portfolio, giving the Group CISOs leadership team reliable, single-source-of-truth visibility of milestones, dependencies and risk.

The role maintains the RAID logs, milestone tracking and benefits evidence, and prepares Board, Technology Advisory Committee and ExCo reporting inputs, applying structured change-management methodology to help sequence portfolio change without creating unmanaged delivery risk.

• Establish and maintain security portfolio governance across the multi-workstream programme, tracking milestones, dependencies, RAID (risks, assumptions, issues, decisions) logs and status against plan.

• Prepare committee reporting inputs on programme progress for Board, Technology Advisory Committee and ExCo materials, translating technical workstream detail into clear executive narrative.

• Maintain milestone and benefits tracking for the security transformation programme, updating the baseline against which capability, cost and risk-reduction benefits are evidenced.

• Support change enablement and stakeholder communications activity across the security portfolio, applying recognised organisational change management methodology to help sequence change and reduce stakeholder fatigue.

• Maintain a single source of truth for portfolio status, working closely with workstream leads across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance to keep data current.

• Track resourcing and budget consumption against the portfolio plan, flagging variances early to the Group CISO and relevant workstream owners.

• Facilitate programme governance forums (steering meetings, milestone reviews) and ensure actions and decisions are documented and followed through.

• Apply agile and waterfall delivery fluency as appropriate to each workstream, adapting tracking and reporting cadence to how each workstream actually delivers.

• Provides programme-level reporting input to the Groups executive risk and technology committees, in coordination with the Group CISOs office.

• Works across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance as a neutral programme coordinator rather than an owner of workstream content.

• Reports programme risk into GRC as part of the enterprise risk register discipline, without assuming GRCs independent assurance role.

• Liaises with the wider NI Technology PMO to ensure security-portfolio milestones are correctly reflected in enterprise-level portfolio reporting where dependencies exist.

• Bachelors degree in business, project management, information technology or a related discipline.

• 3–6 years of experience in programme or project management, ideally within technology, risk or security functions in a regulated industry; banking, payments or financial-services exposure preferred.

• Demonstrated experience contributing to Board- or executive-committee-ready programme materials.

• Working knowledge of RAID management, milestone tracking and portfolio governance disciplines.

• Familiarity with structured change methodologies (e.g. Prosci/ADKAR) preferred, and their practical application to sequencing technology or security change.

• Working fluency in both agile and waterfall delivery approaches, with the judgement to apply the right tracking discipline to each workstream.

• Experience working across multiple stakeholder groups to consolidate status from disparate sources into a single coherent narrative.

• Exposure to a multi-market regulatory environment (MEA or equivalent) is an advantage.

Essential

None required at this level.

Preferred

• CAPM (Certified Associate in Project Management) or PRINCE2 Foundation

• Agile foundation certification (e.g. PMI-ACP, CSM) where the portfolio includes agile-delivered workstreams

• Change Management Certification

• A foundational security certification (e.g. CompTIA Security+ or SSCP) is a nice-to-have, not required, given the role’s programme rather than technical focus.

Aspirational for Progression

• PMP (Project Management Professional) or MSP (Managed Successful Programmes) Practitioner — not required at this level; supports progression to Manager-level programme roles.

Proficiency levels shown are calibrated to Job Level P2 in the Information Security functional skills framework.