Urwah Admin

Alshaya Group

<div>Job No: 4642069
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>Role Profile:

Alshaya employed a dedicated security team to implement and maintain the organization's information security program. Typically, this group is led by a chief information officer. The security group is generally responsible for conducting risk management, a process through which vulnerabilities and threats to information assets are continuously assessed, and the appropriate protective controls are decided on and applied. The value of an organization lies within its information and its security is critical for business operations, as well as retaining credibility and earning the trust of clients.
 
Information security programs are built around the core objectives of the CIA triad: maintaining the confidentiality, integrity and availability of IT systems and business data.

The below Key Performance Areas include but are not limited to: 
&#61692; Define risk governance strategy and ensure alignment with business objectives 
&#61692; Approve control frameworks and ensure cross-functional adoption 
&#61692; Report risk trends and remediation status to executive leadership 
&#61692; Govern exception policy and ensure audit readiness 
&#61692; Ensure audit outcomes drive continuous improvement 
&#61692; Lead enterprise-wide audit planning and regulatory alignment 
&#61692; Present security metrics to board-level stakeholders 
&#61692; Strategic alignment of risk assessments with business objectives 
&#61692; Sponsor control initiatives and allocate resources 
&#61692; Influence business decisions through risk intelligence 
&#61692; Champion security culture and workforce engagement 
&#61692; Govern enterprise investigation protocols and legal coordination 
&#61692; Own Policy enforcement governance and regulatory reporting 
&#61692; Define policy governance and ensure enterprise alignment 
&#61692; Lead enterprise-wide security programs and stakeholder alignment 
&#61692; Define exception handling strategy and oversee execution

Knowledge (Desired): 
&#61692; Authority on ISO governance and regulatory alignment, ensuring frameworks are embedded across the organization. 
&#61692; Strategic oversight of control architecture, ensuring alignment with compliance requirements and business objectives. 
&#61692; Executive-level communication of risk posture, security strategy, and compliance status to leadership and stakeholders. 
&#61692; Leadership in compliance governance, regulatory engagement, and fostering a culture of accountability. 
&#61692; Effective stakeholder communication and coordination during investigations and legal holds. 
&#61692; Oversight of performance measurement, continuous improvement, and reporting of security and compliance KPIs. 
&#61692; Leads enterprise risk alignment, facilitates risk assessments, and engages executive stakeholders in mitigation strategies. 
&#61692; Governs the full policy lifecycle, ensuring strategic alignment and enforcement of security policies. 
&#61692; Leads enterprise-wide compliance and risk mitigation programs through cross-functional collaboration. 
&#61692; Oversees breach response, including senior management notification and crisis management coordination.

Experience 
&#61692; 10 &ndash; 15 Years of Experience 
&#61692; GRC Manager
&#61692; 
Professional Certification: CISM, CGEIT, ISO 27001 Lead Auditor, CIPM, CRISC, CISA PCI ISA

Skills:

&#61692; Proficient in Risk Management: Skilled in identifying, evaluating, and mitigating enterprise-level risks. 
&#61692; Hands-on experience with GRC tools: Practical knowledge of platforms such as Archer, ServiceNow GRC, or equivalent for managing governance, risk, and compliance workflows. 
&#61692; Strategic oversight of security controls: Ability to design, implement, and monitor control frameworks aligned with regulatory standards. 
&#61692; Expertise in ISO and regulatory frameworks: Deep understanding of ISO standards and global compliance requirements (e.g., GDPR, PCI DSS). 
&#61692; Policy governance: Capable of managing the full lifecycle of security policies and ensuring strategic alignment with business objectives. 
&#61692; Compliance leadership: Drives compliance awareness and engagement across departments, including regulatory liaison. 
&#61692; Risk communication: Communicates risk posture and mitigation strategies effectively to executive leadership and stakeholders. 
&#61692; Incident response coordination: Leads breach response efforts, including senior management notification and crisis handling. 
&#61692; Performance metrics and evaluation: Oversees the development and tracking of key performance indicators for continuous improvement. 
&#61692; Cross-functional collaboration: Leads enterprise-wide initiatives for compliance, risk mitigation, and audit readiness. 
 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Manager Information Security - Information Security & Risk - Egypt

<div>Job No: 4642052
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>Role Profile:
 
The GRC Lead &ndash; Privacy, Risk &amp; Access Management will play a pivotal role in strengthening Alshaya Group&rsquo;s governance, risk, and compliance posture with a core focus on data privacy, enterprise risk management, and identity &amp; access governance. This role will also lead and support cross-functional security projects such as SSO integration and user access reviews, ensuring secure, compliant, and business-aligned identity practices across the enterprise.

The Below Key Performance Areas include but are not limited to:

&#61692; Develop and implement privacy and data protection policies aligned with GDPR, KVKK, PDPL, and other regional regulations. 
&#61692; Conduct DPIAs, PIAs, and privacy risk assessments to ensure responsible data handling. 
&#61692; Manage enterprise risk through a structured Risk Management Framework and maintain the Enterprise Risk Register. 
&#61692; Define and enforce IAM policies including RBAC, SoD, and user access reviews. 
&#61692; Lead or support IAM initiatives such as SSO integrations, PAM implementations, and access certification campaigns. 
&#61692; Align GRC and IAM practices with standards like ISO 27001, NIST, PCI DSS, and SOX. 
&#61692; Facilitate internal and external audits, assessments, and third-party reviews. 
&#61692; Oversee GRC tools and privacy platforms (e.g., Archer, OneTrust, ServiceNow GRC). 
&#61692; Drive cross-functional projects including policy harmonization and audit remediation. 
&#61692; Prepare executive-level reports and dashboards for governance and compliance oversight. 
&#61692; Act as a liaison for privacy, risk, and IAM discussions across departments. 
&#61692; Promote GRC awareness and training across the organization.

Knowledge:

&#61692; Strong understanding of global privacy regulations (e.g., GDPR, KVKK, PDPL) and data protection principles. 
&#61692; In-depth knowledge of enterprise risk management frameworks and risk assessment methodologies. 
&#61692; Familiarity with IAM concepts including RBAC, SoD, SSO, PAM, and identity lifecycle management. 
&#61692; Experience with compliance standards such as ISO 27001, NIST, PCI DSS, and SOX. 
&#61692; Proficiency in using GRC and privacy management tools (e.g., Archer, OneTrust, ServiceNow GRC). 
&#61692; Ability to lead cross-functional projects and integrate GRC, IAM, and privacy workflows. 
&#61692; Strong stakeholder engagement and communication skills for executive and cross-departmental collaboration. 
&#61692; Analytical skills for conducting DPIAs, PIAs, and interpreting KRIs and audit findings. 
&#61692; Knowledge of authentication protocols (e.g., SAML, OIDC) and identity governance best practices. 
&#61692; Experience in managing DSARs, breach responses, and audit readiness activities. 
Experience: 
&#61692; 5-7 years experience in Information Security Domain 
&#61692; Bachelor&rsquo;s degree in Information Security, Computer Science, Risk Management, or related field. Master&rsquo;s degree or MBA is a plus. 
&#61692; CIPP/E, CIPM, or other IAPP certifications; CRISC, CISA, or ISO 27001 Lead Implementer; Identity and Access certifications such as Azure, Okta, or SailPoint; ITIL or PMP for project management is a plus.

Skills:
&#61692; 
Strong understanding of IAM principles, SSO protocols (SAML, OIDC), and identity lifecycle. 
&#61692; Knowledge of privacy regulations and enterprise risk frameworks. 
&#61692; Excellent stakeholder management, communication, and cross-functional collaboration skills. 
&#61692; Proficient in GRC tools , Privacy Tools &amp; Access management platforms. 
 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Lead-Information Security (GRC).Information Security & RiskEgypt

<div>Job No: 4642178
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>Role Profile:
 
Responsible to ensure timely reporting of cyber incidents with accurate, meaningful, and comprehensive understanding of cyber incident through its life cycle. Develop proactive security controls to minimize any damage or impact to Alshaya information networks, information systems, data, and services. Need to provide an effective and comprehensive response that include the recovery of any affected information systems and the return to a fully functioning, secure, operational state for all services and information systems.

The below Key Performance Areas include but are not limited to: 
Effective triaging and prioritization of incoming alerts per MITRE ATT&amp;CK framework.
 
Expertise with host and network-based security tools
 
Ensure the timely identification, response, investigation, and remediation of all security events and incidents
 
Thorough understanding of advanced security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)
 
Develop, maintain, and enhance related IR processes and playbooks, documentation,and other supporting procedures
 
Expertise with network monitoring in a SOC environment
 
Develop and maintain program metrics, KPIs and reporting for the incident response program to drive continuous improvement
 
Aid in the evaluating, planning, configuration, and implementation of supporting security initiatives and solutions
 
Ensure security industry standards and best practices are identified and integrated into the program approach and methodologies
 
Expertise in Malware Analysis and Memory Forensics.
 
Knowledge in cloud response and containment
 
Ability to navigate ambiguity and develop working with Teams
 
Excellent written and oral communication skills
 
Knowledge of different types of vulnerabilities like OWASP Top 10/20.
 
Programming knowledge with a popular modern language utilized by above tools (i.e. Java, PHP, Python, Ruby etc.)
 
Life-long learner - always stay up to date with latest attack vectors, vulnerabilities, remediation and protection paradigms, etc.
<div>
Knowledge:
 
 
<ul><li>Experience managing and leading security analysts in a security operation center.
</li></ul> 
<ul><li>Proven results developing and implementing methods, processes, and procedures for detecting, responding, and resolving computer security incidents
</li><li>Deep understanding of present-day cyber-threats, attacker techniques and behaviors and effective methods to both detect &amp; repel these threats for a global organization.
</li><li>Experience with supporting security technologies such as firewalls, proxies, web and email filters, application whitelisting, sandboxing, SIEM, threat intelligence, vulnerability scanning, syslog, IDS/IPS, DLP,EDR, Cloud etc.
</li><li>Strong technology experience with IT technologies including networks, endpoints, virtualization, cloud, operating systems, email, storage, databases, etc.
</li><li>Proficiency leading projects and project management experience with a focus on delivery and execution
</li><li>Highly motivated and self-directed with a passion for solving complex problems
</li></ul>Must be able to prioritize based on risk, schedule and track to deadlines for self and team members
 
Experience 
<ul><li>5-10 years experience in Information Security Domain
</li><li>Graduation Degree/Btech
</li></ul>CEH / OSCP / CHF certifications is added advantage</div>
<ul><li>Skills: Hands on security incident investigation with good knowledge of IR reporting.
</li><li>Hands on creating usecases related to security controls.
</li><li>Strong interpersonal, oral, and written communication skill.
</li><li>Deep understanding of Cyber security Framework.</li></ul> 
 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Lead-Information Security (CSIRT) - Information Security & Risk - Egypt

<div>Job No: 4629436
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>The Role:

Drivers are responsible for operating company-owned vehicles, with the purpose of transporting products and merchandise to various destinations. You will act as an ambassador for Alshaya while adhering to all company, traffic and market guidelines.

Routine responsibilities include:
<ul><li>Ensuring the safety and security of the load during transportation.</li></ul>
<ul><li>Ensuring all documentation connected to the load is fully completed and in compliance with company standards.</li></ul>
<ul><li>Assisting in the safe loading and unloading of goods.</li></ul>
<ul><li>Ensuring the highest level of customer service at all times when dealing with company employees and external customers.</li></ul>

Qualifications &amp; Requirements:

You will have:
<ul><li>General education and a valid vehicle license for the specific weight of vehicle.</li></ul>
<ul><li>At least 1 year experience as a messenger or driver.</li></ul>
<ul><li>Full, clean driving license.</li></ul> 
 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Driver Class III - Logistics - Egypt

<div>Job No: 4658914
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>Job Purpose:

The Voice of Customer (VoC) Insights Analyst is responsible for analyzing and reporting customer feedback to drive actionable insights and improve customer experience. The VoC Insight Analyst will work closely with the Senior VoC Manager and Customer Market Insights Function to ensure that customer feedback is effectively utilized and implemented by the brands.

Accountabilities (but not limited to):

Data Analysis
<ul>
<li>Writing and consistently improving VoC questionnaires</li>
<li>Analyzing data to identify trends, issues, and opportunities for improvement.</li>
<li>Creating and maintaining regular reports and dashboards that highlight key insights and metrics.</li>
</ul>
Cross-Data Connection
<ul>
<li>Integrate VoC findings with other data points to provide comprehensive recommendations.</li>
</ul>
Insights Reporting
<ul>
<li>Create detailed reports and dashboards that inform business decisions.</li>
</ul>
Stakeholder Support &amp; Action Plans
<ul>
<li>Present insights to stakeholders to drive CX improvements</li>
<li>Collaborate with different departments (e.g., marketing, product development, customer service) to ensure VoC insights are integrated into their processes.</li>
<li>Assist in the development and implementation of action plans based on VoC data.</li>
</ul>
Customer Advocacy
<ul>
<li>Act as an advocate for the customer within the organization, ensuring that customer feedback is considered in decision-making processes.</li>
<li>Develop initiatives to improve customer experience based on VoC insights.</li>
</ul>
Competencies &ndash; Functional (job specific):
<ul>
<li>Data Analysis: Expertise in analyzing large datasets for insights.</li>
<li>Data Storytelling: Strong ability to communicate findings clearly.</li>
<li>Insights Synthesis: Ability to connect survey insights with business data.</li>
<li>Reporting: Proficient in developing actionable reports.</li>
</ul>
Qualifications:
<ul>
<li>Bachelor&rsquo;s degree in Analytics, Marketing, or Business.</li>
<li>3-5 years in data analytics or customer insights roles.</li>
<li>Proficient in English and Arabic.</li>
<li>Proficient in data analysis tools (Power BI, Tableau), VoC tools (Medallia, Qualtrics, Sprinklr).</li>
<li>Analytical thinking, attention to detail, and storytelling with data.</li>
</ul> 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Analyst - Voice of Customer Insights - Customer & Technology - Egypt

<div>Job No: 4642036
 
Location: Egypt<div></div><div><div> 
</div></div> 
 
<div></div>Role Profile:
 
The GRC Admin will be responsible in implementing, interpreting, and ensuring compliance with information security policies. Assess and prioritize cybersecurity risks, supporting regulatory compliance, and report security metrics, maintaining governance standards, conducting risk assessments for internal systems and third-party vendors, enforcing security policies, and advising leadership on risk strategies such as mitigation, reduction, transfer, exception handling, and residual risk analysis.

The Below Key Performance Areas include but are not limited to:

&#61692; Implement a data security &amp; privacy risk reporting framework aligned with ISO standards. 
&#61692; Design and document controls to ensure compliance with regulatory and internal requirements. 
&#61692; Facilitate remediation of control gaps and escalate critical issues to leadership. 
&#61692; Manage exception review processes and ensure periodic documentation and review. 
&#61692; Prepare for and support regulatory examinations such as PCI DSS. 
&#61692; Collaborate with auditors and control owners to ensure timely completion of requests. 
&#61692; Monitor and analyze information security metrics to evaluate program effectiveness. 
&#61692; Conduct risk assessments to identify vulnerabilities in systems and third-party products. 
&#61692; Recommend and implement controls to mitigate identified security risks. 
&#61692; Communicate risk findings and actionable recommendations to stakeholders. 
&#61692; Support workforce security initiatives including awareness and training programs. 
&#61692; Facilitate eDiscovery and data collection for investigations of policy violations. 
&#61692; Analyze security incidents and coordinate remediation and awareness efforts. 
&#61692; Contribute to the development and lifecycle management of security policies and procedures. 
&#61692; Collaborate across the organization to implement and enforce security policies.

Knowledge:

&#61692; Understanding of ISO standards and frameworks for information security risk reporting. 
&#61692; Knowledge of designing and implementing technical, administrative, and physical security controls. 
&#61692; Familiarity with regulatory compliance requirements (e.g., GDPR, PCI DSS) and audit processes. 
&#61692; Experience in managing exception handling processes and compliance documentation. 
&#61692; Ability to evaluate and improve the effectiveness of information security programs using metrics. 
&#61692; Proficiency in conducting and documenting information security risk assessments. 
&#61692; Knowledge of risk mitigation strategies and control implementation. 
&#61692; Strong communication skills to convey risk findings and recommendations to stakeholders. 
&#61692; Awareness of workforce security practices, including training and awareness programs. 
&#61692; Experience with eDiscovery processes and handling policy violation investigations. 
&#61692; Analytical skills for incident analysis and coordination of remediation efforts. 
&#61692; Understanding of policy development, lifecycle management, and enforcement. 
&#61692; Ability to collaborate across departments to implement security policies effectively. 
Experience: 
&#61692; 2 years experience in Information Security Domain 
&#61692; Graduation Degree/BTech, Computer Science 
&#61692; Security +, Networking, certifications is added advantage.

Skills:
&#61692; 
Strong knowledge of information security governance, risk assessment, and compliance frameworks (e.g., GDPR, PCI DSS). 
&#61692; Ability to develop, implement, and manage security policies, controls, and awareness programs. 
&#61692; Proficiency in conducting risk assessments and analysing security metrics to support decision-making. 
&#61692; Excellent communication and collaboration skills for working with leadership, auditors, and cross-functional teams. 
 
Advertised: 10 Sep 2025 
Application close: 11 Oct 2025</div>

Administrator-Information Security - Information Security & Risk - Egypt

Position Title: Senior Project ManagerLocation: Kuwait Company: Alshaya Al Ahliea General Trading &amp; Contracting Co. Department: Projects / Operations Reporting To: General Manager / Managing DirectorPosition Overview:We are hiring an experienced and highly organized Senior Project Manager to lead the execution of complex construction and MEP projects. This role demands a strategic thinker with proven ability to manage resources, teams, and timelines while ensuring high-quality delivery within budget and regulatory frameworks. The successful candidate will act as the primary point of contact for clients, consultants, and internal stakeholders throughout the project lifecycle.Key Responsibilities:<ul><li>Oversee full project lifecycle from initiation through planning, execution, handover, and close-out.</li><li>Lead multidisciplinary teams including site engineers, foremen, subcontractors, and suppliers.</li><li>Prepare and control project budgets, procurement schedules, and cash flow forecasts.</li><li>Approve baseline programs, method statements, and risk mitigation plans.</li><li>Monitor site progress, quality control, and safety compliance in line with contract requirements.</li><li>Attend project meetings with clients, consultants, and authorities.</li><li>Resolve high-level technical, contractual, or coordination issues.</li><li>Ensure timely submission of variations, claims, and project documentation.</li><li>Manage handover procedures and secure final approvals from relevant authorities.</li></ul>Qualifications &amp; Skills:<ul><li>Bachelor&rsquo;s degree in Civil, Mechanical, Electrical Engineering, or related field. Master&rsquo;s is a plus.</li><li>Minimum 10 years of experience in project management, with at least 5 years in a senior leadership role.</li><li>Proven success in managing large-scale MEP, civil, or infrastructure projects.</li><li>PMP, PMI, or PRINCE2 certification is preferred.</li><li>Strong leadership, negotiation, and decision-making skills.</li><li>Proficiency in MS Project, Primavera P6, AutoCAD, and MS Office Suite.</li><li>Fluency in English (Arabic is a plus).</li><li>Kuwait experience and transferable visa preferred.</li></ul>Interview Process:All applicants will go through the standard three-stage evaluation:<ul><li>HR Round &ndash; Assessment of qualifications, work history, and alignment with company culture.</li><li>Technical Round &ndash; Evaluation of project management knowledge, regulatory understanding, and project case studies.</li><li>Executive/Managerial Round &ndash; High-level discussion with executive team to assess leadership style, stakeholder management, and strategic thinking.</li></ul>Job Types: Full-time, PermanentPay: KD600.000 - KD900.000 per month

Senior Project Manager

Join Alshaya Group and explore 24   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.