cyber risk manager

Yousuf Adil (Chartered Accountants)

Job SummaryYousuf Adil Chartered Accountants is looking for the position of &ldquo;Manager - Technology &amp; Cyber Risk Advisory&rdquo; within Technology and Cyber Risk Advisory department for itsKarachi office. The incumbent will be responsible for:Job Description<ul><li>Lead end-to-end IT audit and advisory engagements, including planning, execution, reporting, and client communication.</li><li>Assess IT general controls (ITGC), application controls, cybersecurity, cloud environments, and emerging technologies.</li><li>Deliver insights and recommendations to strengthen client risk management and internal controls.</li><li>Support regulatory and compliance projects (e.g., ISO 27001, SOC 1/2, NIST, COBIT, etc.).</li><li>Develop and maintain strong client relationships and contribute to business development.</li><li>Manage and coach junior team members, promoting a culture of excellence and collaboration.</li><li>Relevant certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly preferred.</li><li>Assist in preparing technical proposals for new venture or collaborations .</li></ul>Qualification<ul><li>BS - Computer Science /Information Systems / Cyber Security or related fields.</li></ul>Experience<ul><li>6+ years of experience in IT audit, advisory, cyber security or related fields (preferably in Big 4 firms or any similar sector/consulting services).</li></ul>Job Type: Full-timePay: From Rs200,000.00 per monthApplication Question(s):<ul><li>Do you have experience in IT audit, advisory, cyber security or related fields ?</li><li>Have you completed Bachelors in Computer Science /Information Systems / Cyber Security or related fields.?</li></ul><ul><li>Do you have experience working in any Big four Firms?</li></ul><ul><li>What is your current salary?</li></ul><ul><li>What is your expected salary?</li></ul><ul><li>What will be your notice period?</li></ul>Location:<ul><li>Karachi (Required)</li></ul>Work Location: In person

Manager - Technology and Cyber Risk Advisory

Riyadh Air

<div>About the Company:

Riyadh Air (RX), headquartered in the Saudi Capital, is the new national airline that&rsquo;s shaping the future of flying. It seeks to lead the aviation industry by transforming Saudi Arabia into a global aviation and trade hub &ndash; a digitally native airline that will connect the kingdom to more than 100 destinations.
About the Role:

Do you have the strategic insight and leadership drive to shape enterprise cybersecurity risk for a next‑generation airline? 
In this pivotal role, you'll lead cybersecurity strategy and enterprise cyber risk posture by embedding risk‑based decision making across business and technology environments. 
You'll develop and maintain the enterprise‑wide cybersecurity strategy aligned with organisational objectives and risk appetite. 
Central to this role, you will lead the cyber risk management lifecycle, oversee enterprise risk assessments, establish data security governance, and ensure emerging technology and business risks are proactively identified and managed.<div> 
Acting as a bridge between cyber risk and executive decision‑making, this role ensures complex threats are translated into meaningful insight while balancing innovation, resilience and protection of critical information assets.</div><div><div>
</div><div>
You&rsquo;ll be both strategic and pragmatic, equally comfortable defining multi‑year cyber roadmaps and engaging leaders with clear, risk‑based insights.</div></div><div></div> 
Importantly, you will bring a strong background in cybersecurity strategy, enterprise risk management, and governance, ideally within large or complex organisations. 
Join us in shaping a resilient and secure future for air travel; where strategy meets risk intelligence, and trust is built into every decision.
About You:

Degree qualified, you are expected to demonstrate a minimum of 7 years of experience in cybersecurity strategy, enterprise cyber risk management, or GRC leadership roles, with a strong understanding of cyber risk assessment, data security governance, and strategic security planning. 
We&rsquo;d love to hear from you even more if you have experience influencing executive leadership and shaping risk decisions within highly regulated or digitally transforming environments. 
This is your opportunity to shape the future of air travel. Bring your best and show us why you can own this position within Riyadh Air. 
Please submit your application by clicking on the Apply button. Our Talent Acquisition team will be reviewing applications shortly.</div>

Cybersecurity Strategy and Risk Manager

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

QAFCO (Qatar Fertiliser Company)

<div>
 
 Job Summary
 
 
 
 The Senior Program Management Expert plays a crucial role in executing the company&rsquo;s risk and cyber security initiatives and maintaining the overall program. This role ensures the effective management of risk and cyber security strategy implementation, and portfolio oversight, providing comprehensive reporting to support the company&rsquo;s risk and cyber security objectives and regulatory compliance.
 
 
 
 Key Accountabilities
 
 
 
 <ul>
 <li>
 Manage and coordinate sourcing activities for risk and cyber security tools, solutions, and services to ensure alignment with the company&rsquo;s requirements.
 </li>
 <li>
 Oversee budget planning and tracking for risk and cyber security initiatives, for the goal of optimizing resource allocation and cost control.
 </li>
 <li>
 Track and manage the risk and cybersecurity maturity program, continuously identifying areas for improvement and proposing strategic initiatives.
 </li>
 <li>
 Coordinate the implementation of risk and cyber security initiatives across all organizational units with the goal of achieving seamless system integration and architecture alignment.
 </li>
 <li>
 Develop, maintain, and deliver comprehensive reports and dashboards to leadership to support decision-making and demonstrate value realization.
 </li>
 <li>
 Lead cross-functional teams to execute risk and cyber security projects from initiation to closure, ensuring alignment with strategic business objectives.
 </li>
 <li>
 Create and maintain project documentation, including project plans, schedules, risk registers, and status reports.
 </li>
 <li>
 Facilitate regular meetings with key internal and external stakeholders to provide updates, address challenges, and escalate risks as necessary.
 </li>
 <li>
 Build and maintain strong relationships with vendors, service providers, and key internal stakeholders to ensure collaborative risk and cyber security initiatives.
 </li>
 <li>
 Support vendor selection and management processes for risk and cybersecurity-related procurements.
 </li>
 <li>
 Support the process of vendor performance management.
 
 
 </li>
 </ul>
 
 Desired Candidate Profile
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree in relevant discipline.
 </li>
 <li>
 Minimum of 8 years direct and relevant experience.
 </li>
 <li>
 In depth knowledge of risk and cyber security frameworks, standards and best practices (e.g., ITIL, COBIT, ISO/IEC 2700x, IEC/62443, ISO 31000, COSO).
 </li>
 <li>
 Credentials: Professional certifications PMP required, CISSP, CISM, or equivalent are preferred.
 </li>
 </ul>
</div>

Sr. Specialist, Cybersecurity & Risk Program

AECOM

<div>Company Description 
Work with Us. Change the World.
At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world&rsquo;s most complex challenges and build legacies for future generations.
There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.
We're one global team driven by our common purpose to deliver a better world. Join us. 
Job Description 
AECOM is seeking a seasoned Cyber-Physical System (CPS) Security &amp; Resiliency growth leader to establish and grow our Cyber-Physical System Security &amp; Resiliency team. This role builds the firm&rsquo;s capability to help clients strengthen and modernize cyber-physical environments through integrated security, risk, and resilience strategies.
While governance and risk may intersect with information technology (IT), this role is not IT-centric. The focus is on the safety, security, and resilience of cyber-physical systems across CPS/OT environments (e.g., industrial control systems (ICS), supervisory control and data acquisition (SCADA), OT) and digitally enabled CPS/IT systems.
Role Primary Objectives:<ul><li>
Establish the CPS Security &amp; Resilience Team as a source of top and bottom-line growth within the Energy Practice.
</li><li>Strengthen client confidence and executive trust in AECOM&rsquo;s ability to manage modern infrastructure risk.</li><li>
Establish a repeatable, scalable CPS capability that integrates with existing AECOM services.</li><li>
Position AECOM as a trusted consultant on the convergence of infrastructure, automation, AI, and physical consequence.</li><li>
Establish governance, risk, and resilience models for the integration of AI and advanced analytics into CPS/OT and CPS/IT environments, with explicit focus on physical consequence, system safety, and operational continuity.</li></ul>
Responsibilities:
Cyber-Physical Systems (CPS) Security &amp; Resilience Strategic Growth and Market Engagement<ul><li>
Establish the CPS Security &amp; Resilience practice for the Power sector</li><li>
Develop and execute go-to-market, recruitment, and top- and bottom-line growth strategies for the CPS Security &amp; Resiliency workstream</li><li>
Support strategic pursuits and key accounts from the cyber-physical resiliency lens, where CPS risk influences project outcomes or client confidence.</li><li>
Engage client executives, boards, and regulators on system-level risk, resilience, and governance.</li><li>
Act as a strategic partner to leadership on infrastructure resilience, reliability, and operational risk</li><li>
Advise clients on cyber-physical risk and resiliency implications of AI-enabled grid modernization, automation, DER integration, advanced protection schemes, and digitally enabled control environments</li><li>
Oversee and guide the development of reusable tools, templates, frameworks, and best practices for CPS Security &amp; Resiliency</li></ul>
Advisory &amp; Enterprise Alignment<ul><li>
Partner closely with Advisory leadership to align CPS services with broader operational, digital, and risk advisory offerings</li><li>
Coordinate with existing IT, OT, and cyber resources across AECOM to avoid duplication and fragmentation</li></ul>
Client Engagement, Delivery, and Practice Growth<ul><li>
Work closely with senior leadership to shape AECOM&rsquo;s CPS Security &amp; Resilience offerings and expand market presence</li><li>
Lead project workstreams while teaching and mentoring junior staff</li><li>
Support capture and proposal activities, including developing scopes of work, methodologies, and strategic content</li><li>
Build and maintain strong client relationships to identify new opportunities and ensure successful delivery</li><li>
Serve as a bridge between technical specialists and executive-level client discussions</li></ul>
Cyber-Physical Systems (CPS) Security &amp; Resilience Practice Elements:<ul><li>
Lead OT engagements related to cyber-physical systems</li><li>
Lead client engagements addressing AI-enabled CPS risk, resilience, and governance across CPS/OT and CPS/IT environments, including model risk, autonomy, decision authority, and failure propagation into physical systems</li><li>
Lead cybersecurity assessments, vulnerability analyses, and program reviews to help clients identify risks and prioritize improvements</li><li>
Conduct maturity assessments, risk evaluations, gap analyses, and policy reviews to help clients define long-term CPS/OT and CPS/IT strategies</li><li>
Develop OT governance models, operational frameworks, and investment plans that guide clients through modernization and lifecycle planning</li><li>
Facilitate workshops, interviews, and stakeholder meetings to gather requirements and translate them into strategic recommendations</li><li>
Embed CPS risk considerations into pursuits, delivery models, and client engagements</li><li>
Develop OT and ICS cybersecurity programs aligned with frameworks such as NIST CSF, NERC CIP, and IEC 62443</li><li>
Prepare guidance for OT security controls, monitoring approaches, segmentation strategies, governance, and compliance</li></ul>
CPS Security &amp; Resilience Leadership<ul><li>
Provide industry leadership and guidance on CPS/OT and CPS/IT security &amp; resiliency, promoting alignment with enterprise risk management, regulatory expectations, and delivery realities</li><li>
Advise clients on CPS architecture concepts, technology options, integration considerations, and migration strategies</li><li>
Oversee and guide master planning for CPS, including AI-enabled CPS, grid modernization, SCADA and EMS/DMS evolution, advanced automation, digital substations, and next-generation OT and CPS/IT architectures</li><li>
Evaluate operational risks and recommend solutions that improve resiliency, reliability, and worker safety in CPS/OT environments</li></ul> 

Qualifications 
Minimum Requirements<ul><li>
BS degree in Engineering, Computer Science, Information Systems, Cybersecurity, or a related field and 10 years of related experience</li><li>
Minimum of 10 years of business leadership experience in cyber-physical systems, OT/ICS, infrastructure security, or resilience.</li><li>
Minimum of 10 years of experience delivering advisory services (strategy, governance, road mapping, program development, compliance) into cyber-physical system OT, ICS, and SCADA environments.</li><li>
Minimum years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Proven track record of growth, building, and scaling capabilities inside large engineering (AEC), EPC, or infrastructure organizations.</li><li>
Proven ability to translate risk into executive-level decision frameworks and business outcomes.</li><li>
Experience working across matrixed organizations with multiple business lines and stakeholders.</li><li>
Advanced knowledge of relevant CPS, OT, and cyber risk frameworks and regulatory constructs applicable to cyber-physical systems within critical infrastructure environments.</li><li>
Strong communication skills with experience developing client-facing reports, strategies, roadmaps, and presentations.</li><li>
Deep understanding of Power sector systems and the operational realities of infrastructure delivery.</li></ul>
Preferred Qualifications<ul><li>
Master of Business Administration (MBA) preferred</li><li>
15 years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Cyber-physical training or certifications are preferred, e.g. &ndash;<ul><li>
C|CISO, GICSP, CISSP</li><li>
Consequence-focused training for Physical &amp; Digital Infrastructure, e.g. Consequence-Driven, Cyber-Informed Engineering (CCE ACCELERATE)</li><li>
AI-governance and/or AI-risk related training</li></ul></li><li>
15 years of P&amp;L ownership experience</li><li>
Previous experience developing CPS service offerings</li><li>
Previous experience developing and managing CPS-related managed services</li><li>
Industry voices and distinction preferred, e.g. &ndash;<ul><li>
Previously published in industry journals.</li><li>
Previous conference speaking engagements.</li><li>
Participated in various media such as TV, radio, podcasts, and webinars.</li></ul></li></ul> 

Additional Information 
This position does not offer sponsorship now or in the future.
This position does not offer relocation assistance.<div></div>
About AECOM
AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&amp;D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients&rsquo; complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle &ndash; from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.
What makes AECOM a great place to work
You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects - both in your local community and on a global scale - that are transforming our industry and shaping the future. With cutting-edge technology and a network of experts, you&rsquo;ll have the resources to make a real impact. Our award-winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you&rsquo;ve always envisioned. Here, you&rsquo;ll find a welcoming workplace built on respect, collaboration and community&mdash;where you have the freedom to grow in a world of opportunity.
As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines.</div>

AVP, Team Lead, Cyber-Physical Systems (CPS) Security & Resiliency (Power Sector)

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior GRC Analyst to join our Cyber Risk, GRC &amp; Regulatory team. You will support delivery of governance, risk, and compliance engagements for international clients &mdash; conducting gap analyses, developing policies, executing risk assessments, supporting audits, and mapping controls across ISO 27001, NIST, PCI DSS, SOC 2, and more. This is a consultancy delivery role: real client projects from day one.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Conduct gap analyses against ISO/IEC 27000 family (27001, 27002, 27005, 27701) and support remediation plans</li>
<li>Develop, review, and maintain information security policies, standards, and procedures</li>
<li>Execute risk assessments: identify threats/vulnerabilities, evaluate likelihood/impact, maintain risk registers</li>
<li>Support internal and external audits: gather evidence, review controls, track findings</li>
<li>Conduct vendor and third-party risk assessments</li>
<li>Map and crosswalk controls across ISO 27001, NIST CSF v2, NIST SP 800-53, PCI DSS, SOC 2</li>
<li>Develop Statements of Applicability (SoA), BCPs, and ISMS documentation</li>
<li>Prepare client deliverables: gap reports, risk outputs, policy docs, compliance summaries</li>
<li>Leverage AI tools (Claude, ChatGPT) for research, policy drafting, control mapping</li>
<li>Collaborate with SOC, offensive security, and architecture teams on control validation</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in Cybersecurity, Information Security, IT, Computer Science, or related</li>
<li>0&ndash;1 year in GRC, information security, compliance, or IT audit (internships count)</li>
<li>Solid understanding of the ISO/IEC 27000 family (27001, 27002, 27005) &mdash; a must</li>
<li>Familiarity with NIST CSF v2, RMF, SP 800-53 &mdash; highly preferred</li>
<li>Familiarity with PCI DSS and SOC 2 &mdash; highly preferred</li>
<li>Fluent English (written and spoken)</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Strong technical writing skills</li>
<li>CISSP, CASP+, or VICI VCGP &mdash; a major plus</li>
<li>VICI VCGA, Security+, ISC2 CC, ISO 27001 LI/LA, CISA, CRISC &mdash; a plus</li>
<li>GRC platforms (ServiceNow, Archer, OneTrust) &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior GRC Analyst

Search 10000+ Cyber risk manager jobs near you this May. New roles added regularly across leading industries. Apply today.