Assistant Manager, InfoSec Programme & Change Management
About this role
1. Role Purpose
Network International is the leading enabler of digital commerce across the Middle East and Africa, providing payment technology and services to banks, merchants, fintechs and governments.
Network International's Information Security function runs a broad, multi-workstream security programme spanning Cyber Resilience Operations, Governance, Risk & Compliance, Security Architecture & Engineering and AI & Data Security Governance. This role is the dedicated programme discipline behind that portfolio, giving the Group CISO's leadership team reliable, single-source-of-truth visibility of milestones, dependencies and risk.
The role maintains the RAID logs, milestone tracking and benefits evidence, and prepares Board, Technology Advisory Committee and ExCo reporting inputs, applying structured change-management methodology to help sequence portfolio change without creating unmanaged delivery risk.
2. Key Responsibilities
Establish and maintain security portfolio governance across the multi-workstream programme, tracking milestones, dependencies, RAID (risks, assumptions, issues, decisions) logs and status against plan.
Prepare committee reporting inputs on programme progress for Board, Technology Advisory Committee and ExCo materials, translating technical workstream detail into clear executive narrative.
Maintain milestone and benefits tracking for the security transformation programme, updating the baseline against which capability, cost and risk-reduction benefits are evidenced.
Support change enablement and stakeholder communications activity across the security portfolio, applying recognised organisational change management methodology to help sequence change and reduce stakeholder fatigue.
Maintain a single source of truth for portfolio status, working closely with workstream leads across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance to keep data current.
Track resourcing and budget consumption against the portfolio plan, flagging variances early to the Group CISO and relevant workstream owners.
Facilitate programme governance forums (steering meetings, milestone reviews) and ensure actions and decisions are documented and followed through.
Apply agile and waterfall delivery fluency as appropriate to each workstream, adapting tracking and reporting cadence to how each workstream actually delivers.
3. Governance & Interfaces
Provides programme-level reporting input to the Group's executive risk and technology committees, in coordination with the Group CISO's office.
Works across Cyber Resilience Operations, GRC, Security Architecture & Engineering and AI & Data Security Governance as a neutral programme coordinator rather than an owner of workstream content.
Reports programme risk into GRC as part of the enterprise risk register discipline, without assuming GRC's independent assurance role.
Liaises with the wider NI Technology PMO to ensure security-portfolio milestones are correctly reflected in enterprise-level portfolio reporting where dependencies exist.
4. Qualifications & Experience
Bachelor's degree in business, project management, information technology or a related discipline.
3–6 years of experience in programme or project management, ideally within technology, risk or security functions in a regulated industry; banking, payments or financial-services exposure preferred.
Demonstrated experience contributing to Board- or executive-committee-ready programme materials.
Working knowledge of RAID management, milestone tracking and portfolio governance disciplines.
Familiarity with structured change methodologies (e.g. Prosci/ADKAR) preferred, and their practical application to sequencing technology or security change.
Working fluency in both agile and waterfall delivery approaches, with the judgement to apply the right tracking discipline to each workstream.
Experience working across multiple stakeholder groups to consolidate status from disparate sources into a single coherent narrative.
Exposure to a multi-market regulatory environment (MEA or equivalent) is an advantage.
5. Professional Certifications
Essential
None required at this level.
Preferred
CAPM (Certified Associate in Project Management) or PRINCE2 Foundation
Agile foundation certification (e.g. PMI-ACP, CSM) where the portfolio includes agile-delivered workstreams
Change Management Certification
A foundational security certification (e.g. CompTIA Security+ or SSCP) is a nice-to-have, not required, given the role’s programme rather than technical focus.
Aspirational for Progression
PMP (Project Management Professional) or MSP (Managed Successful Programmes) Practitioner — not required at this level; supports progression to Manager-level programme roles.
6. Skills (NI Security Functional Skills Framework)
Proficiency levels shown are calibrated to Job Level P2 in the Information Security functional skills framework.
| Skill (NI Security Functional Skills Framework) | Expected Proficiency |
|---|---|
| Change Management | Foundational |
| Cyber Security Policies | Foundational |
| Security Risk Management | Foundational |
| Compliance Review and management | Foundational |
Company at a glance
Over the past 30 years, we have built a business based on long-standing and trusted relationships with many of the leading merchants, financial institutions and payment networks operating in the Middle East and Africa. Such relationships are based on our comprehensive capabilities, scale, local presence in the multiple markets in which we operate, alongside our trusted reputation. This gives us significant scale and leadership in the region, where we operate in more than 50 countries, serve over 130,000 merchants and 250 financial institutions and fintech customers, whilst managing more than 16 million customer credentials.
We have a diversified business model and operate across the entire consumer payments value chain. We do this with a growth-focused strategy through two business lines:
- That enables our merchant customers to ‘take payments’, by providing them with various payment acceptance methods, both online and offline.
- Which supports our financial institution, fintech and other payment issuing institution customers in enabling consumers ‘make payments’, by managing and processing their consumer payment credentials and transactions.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?