Qureos Mentor

Xenon7

<div>Location: Cairo, Egypt (100% On-Premise)
Contract Duration: 6 Months (Extendable)
Employment Type: Contract
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today&rsquo;s most complex challenges.
About the Client:
Join one of Egypt&rsquo;s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
Job Summary:
This role covers highly technical disciplines within InfoSec: security architecture, engineering review, and the maturation of vulnerability and patch management systems. The specialist works closely with internal Security Architecture managers and the Security Operations Center (SOC) team to strengthen the bank's detection and defensive posture, ensure new infrastructure designs are secure by design, and fully operationalize the vulnerability management lifecycle.
Key Responsibilities:
A. Security Architecture &amp; Engineering Assessment<ul><li>Review new and changed system designs, network architectures, and digital platform builds from an</li></ul>
information security perspective, prior to build or procurement approval.<ul><li>Produce Security Architecture Review Reports with risk-rated findings, threat model summaries, and</li></ul>
design recommendations aligned to security standards and CBE requirements.<ul><li>Assess security of APIs, cloud components, integration layers, and digital banking platforms (mobile,</li></ul>
internet banking, payment processing) against OWASP, NIST, and CBE guidelines.<ul><li>Maintain an architecture review register tracking all submitted designs, decisions, and open risk items.</li><li>Contribute to the InfoSec reference architecture and security design patterns library.</li></ul>
B. Tenable SC &mdash; Vulnerability &amp; Patch Management<ul><li>Take ownership of Tenable Security Center (SC) and other vulnerability solutions configuration, scan</li></ul>
policy design, and coverage assurance across full asset inventory.<ul><li>Design and implement a structured vulnerability management workflow &mdash; scan, triage, risk-rate, assign,</li></ul>
track, and verify remediation &mdash; integrated with IT's patch management process.<ul><li>Produce weekly and monthly vulnerability dashboards for IT and InfoSec leadership showing patch SLA</li></ul>
compliance, critical exposure trends, and remediation velocity.<ul><li>Define and enforce scan coverage SLAs: all in-scope assets scanned at appropriate frequency per asset</li></ul>
criticality tier.<ul><li>Identify and escalate monitoring blind spots &mdash; unscanned, uncredentialed, or unreachable assets &mdash; and</li></ul>
drive resolution with IT.<ul><li>Enable Tenable SC reporting to feed directly into KRI metrics for board-level visibility on patch SLA</li></ul>
breach rate and vulnerability exposure. 
Requirements<ul><li> 
Minimum 8 years in information security with strong hands-on technical depth across at least two of the</li></ul>
three disciplines in this role.<ul><li>Proven Tenable SC (or Tenable.io) administration and workflow design experience &mdash; must be able to</li></ul>
demonstrate scan configuration, policy tuning, and dashboard creation.<ul><li>Experience conducting security architecture reviews for banking or financial sector projects.</li><li>Practical threat hunting experience using SIEM and EDR platforms with documented hunt outputs.</li><li>Familiarity with MITRE ATT&amp;CK framework and its application to threat hunting and detection</li></ul>
engineering.
Preferred Certifications<ul><li>Tenable Certified Security Engineer (TCSE) or Tenable.sc Specialist</li><li>GIAC Certified Enterprise Defender (GCED) or GIAC Certified Threat Intelligence Analyst (GCTI)</li><li>CISSP &mdash; Certified Information Systems Security Professional</li><li>SABSA Chartered Security Architect (SCF or SCP)</li></ul>
Preferred Experience<ul><li>Experience in Egyptian banking or financial institution regulated by CBE.</li><li>Hands-on with F5 AWAF, Palo Alto, or equivalent network/application security controls from an</li></ul>
assessment perspective.<ul><li>Familiarity with NIST CSF 2.0 and CBE Cybersecurity Framework control domains.</li></ul> 
Benefits 
<ul><li>
Attractive, market-leading salary package</li><li>
Clear career advancement path with professional development opportunities</li></ul></div>

Security Architecture, Engineering & Threat Operations Lead - Banking

<div>Location: Cairo, Egypt (100% On-Premise)
Contract Duration: 6 Months (Extendable)
Employment Type: Contract
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today&rsquo;s most complex challenges.
About the Client:
Join one of Egypt&rsquo;s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
Job Summary:
This role is responsible for designing, building, and running information security awareness and engagement
programme from the ground up. It is not a content creation role. It is a programme lead role &mdash; combining
marketing strategy, internal communications, vendor management, and behavioural change to shift the security
culture across the bank. The lead owns the full programme: strategy, calendar, content, delivery, vendor sourcing,
measurement, and executive reporting.
Key Responsibilities:
A. Programme Strategy &amp; Design<ul><li>Design a holistic, annual InfoSec Awareness Programme covering all staff segments &mdash; branch</li></ul>
employees, operations, technology, management, and executives.<ul><li>Segment the audience and tailor content and delivery methods per segment: role-based risks, language</li></ul>
level, digital literacy, and regulatory obligations.<ul><li>Apply behavioural science principles (nudge theory, social proof, loss aversion) to design campaigns that</li></ul>
change behaviour, not just increase awareness scores.<ul><li>Map programme activities to security pillars, CBE Cybersecurity Framework culture requirements, and</li></ul>
PCI DSS awareness obligations.<ul><li>Define programme KPIs: phishing simulation click rates, training completion rates, awareness survey</li></ul>
scores, and reported incident rates by staff.
B. Communication &amp; Marketing Execution<ul><li>Produce and distribute security awareness communications across channels: email newsletters, intranet,</li></ul>
digital signage, branch posters, and leadership messages.<ul><li>Write copy and design briefs that translate technical security concepts into plain, compelling business</li></ul>
language &mdash; Arabic and English.<ul><li>Partner with Marketing function to ensure awareness materials align with the bank's brand guidelines and</li></ul>
STEP strategy visual identity.<ul><li>Build and maintain an annual awareness calendar aligned to global events (Cybersecurity Awareness</li></ul>
Month, Safer Internet Day, World Password Day) and internal milestones.
C. Interactive Activities &amp; Vendor Management<ul><li>Source, evaluate, and manage vendors delivering awareness platform services (e.g., KnowBe4,</li></ul>
Proofpoint Security Awareness, Terranova, or equivalent).<ul><li>Design and run phishing simulation campaigns: configure scenarios, set difficulty progression, manage</li></ul>
employee follow-up training, and report results.<ul><li>Deliver interactive awareness sessions including workshops, tabletop scenarios, gamified learning,</li></ul>
escape room formats, and lunch-and-learn events.<ul><li>Organise executive and board-level awareness sessions tailored to cyber risk and governance &mdash; these</li></ul>
require different content and delivery than general staff campaigns.<ul><li>Manage vendor SLAs, budgets, and delivery quality for all third-party awareness service providers.</li></ul>
D. Measurement &amp; Reporting<ul><li>Track programme performance metrics monthly: training completion, phishing click rates, awareness</li></ul>
survey results, and engagement channel reach.<ul><li>Report quarterly to the Head of Engagement and CISO with trend analysis, benchmark comparisons</li></ul>
(industry and Egyptian banking sector), and programme adjustments.<ul><li>Feed phishing click rate KRI data into the InfoSec KRI dashboard for board-level risk reporting.</li><li>Conduct an annual security culture survey and produce a report with year-on-year trend and action plan.</li></ul> 
Requirements<ul><li> 
Minimum 6 years of experience across information security, internal communications, or digital marketing</li></ul>
&mdash; with at least 3 years specifically in security awareness programme management.<ul><li>Proven track record designing and running a security awareness programme in a financial institution &mdash;</li></ul>
must be able to show measurable outcome improvements (e.g., phishing click rate reduction, training
completion uplift).<ul><li>Strong Arabic and English written communication skills &mdash; content writing is a core part of this role.</li><li>Experience managing awareness platform vendors and phishing simulation tools.</li><li>Understanding of PCI DSS Requirement 12.6 (security awareness education) and CBE</li></ul>
culture/awareness obligations.
Preferred Certifications<ul><li>SANS Security Awareness Professional (SSAP)</li><li>CompTIA Security+ or equivalent foundational security qualification</li><li>CIM Certificate/Diploma in Professional Marketing or equivalent marketing qualification</li></ul>
Preferred Experience<ul><li>Experience in Egyptian banking or Arabic-language corporate communication environments.</li><li>Familiarity with KnowBe4, Proofpoint Security Awareness Training, or Terranova platforms.</li><li>Experience delivering executive and board-level security briefings.</li><li>Background in instructional design or adult learning principles.</li></ul> 
Benefits 
<ul><li>
Attractive, market-leading salary package</li><li>
Clear career advancement path with professional development opportunities</li></ul></div>

InfoSec Awareness & Engagement Lead - Banking

<div>Location: Cairo, Egypt (100% On-Premise)
Contract Duration: 6 Months (Extendable)
Employment Type: Contract
About us:
Where elite tech talent meets world-class opportunities!
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today&rsquo;s most complex challenges.
About the Client:
Join one of Egypt&rsquo;s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.
Job Summary:
This role exists to accelerate the information security compliance posture across IT and Digital Transformation. The specialist acts as the InfoSec function's technical compliance arm&mdash;tracking, evidencing, and reporting on remediation progress against CBE Cybersecurity Framework requirements, PCI DSS obligations, and internal control commitments. The role also leads and executes assurance exercises, either directly or by scoping and managing third-party security assessment engagements.
Key Responsibilities:
A. IT &amp; Digital Transformation Compliance Follow-Up<ul><li>Maintain a live compliance tracker across all active CBE Cybersecurity Framework control domains (IAM,</li></ul>
PAM, GRC, Container Security, and others).<ul><li>Conduct regular technical walk-throughs with IT and Digital Transformation teams to validate</li></ul>
implementation status and close evidence gaps.<ul><li>Escalate risks and blockers to the Head of GRC and CISO with clear risk-quantified language suitable for</li></ul>
Risk Committee reporting.<ul><li>Map remediation actions to OKR key results and track delivery against agreed timelines.</li><li>Prepare compliance status reports in a format suitable for senior management and regulatory audiences.</li></ul>
B. PCI DSS Engagement Lead<ul><li>Own the end-to-end PCI DSS engagement cycle &mdash; scoping, gap assessment, remediation tracking, QSA</li></ul>
coordination, and Report on Compliance (RoC) or Self-Assessment Questionnaire (SAQ) readiness.<ul><li>Coordinate across IT, Operations, and Digital to ensure cardholder data environment (CDE) controls are</li></ul>
implemented, evidenced, and maintained.<ul><li>Manage the relationship with the appointed Qualified Security Assessor (QSA) and act as the internal</li></ul>
point of contact throughout the assessment cycle.<ul><li>Drive closure of PCI DSS findings and build a compensating controls register where technical controls are</li></ul>
not yet feasible.<ul><li>Maintain PCI DSS documentation library including network diagrams, data flow diagrams, asset inventory,</li></ul>
and policies relevant to the CDE.
C. InfoSec Assurance Exercises<ul><li>Plan and execute assurance activities including control testing, configuration reviews, access reviews,</li></ul>
and policy compliance spot checks.<ul><li>Scope, procure, and manage third-party security assessment vendors where specialized assessment</li></ul>
capability is required (e.g., penetration testing, red team exercises, cloud security reviews).<ul><li>Produce clear assurance reports with risk-rated findings, business impact statements, and prioritized</li></ul>
remediation recommendations.<ul><li>Track finding remediation to closure and validate effectiveness of corrective actions.</li><li>Coordinate with the InfoSec Control Validation Manager to align assurance outputs with</li></ul>
broader control validation programme. 
Requirements<ul><li> 
Minimum 7 years of information security experience, with at least 3 years in a banking or financial</li></ul>
institution.<ul><li>Hands-on PCI DSS experience &mdash; must have participated in or led at least one full RoC or SAQ-D</li></ul>
assessment cycle.<ul><li>Deep knowledge of CBE Cybersecurity Framework requirements and Egyptian regulatory context.</li><li>Experience conducting technical compliance gap assessments across IT infrastructure, network, and</li></ul>
application layers.<ul><li>Strong written and verbal communication skills in both Arabic and English.</li></ul>
Preferred Certifications<ul><li>CISA &mdash; Certified Information Systems Auditor</li><li>PCIP or PCI ISA &mdash; PCI Internal Security Assessor</li><li>ISO 27001 Lead Auditor</li><li>CISM &mdash; Certified Information Security Manager</li></ul>
Preferred Experience<ul><li>Prior experience in an Egyptian bank or financial institution operating under CBE oversight.</li><li>Familiarity with GRC tooling (RSA Archer, ServiceNow GRC, or equivalent).</li><li>Experience working with external auditors, QSAs, and regulators.</li></ul> 
Benefits 
<ul><li>
Attractive, market-leading salary package</li><li>
Clear career advancement path with professional development opportunities</li></ul></div>

InfoSec Compliance & Assurance Lead - Banking

Join Xenon7 and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Xenon7

About Company

Security Architecture, Engineering & Threat Operations Lead - Banking

InfoSec Awareness & Engagement Lead - Banking

InfoSec Compliance & Assurance Lead - Banking