cyber security grc lead

Nawy

<div>
 We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
 
 
 in Nawy. This role ensures that security risks are identified, assessed, and managed while
 
 
 maintaining compliance with relevant regulatory and industry standards.
 
 
 The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
 
 
 manages security awareness, and partners closely with engineering, product, and legal teams
 
 
 to ensure secure-by-design operations across the entire organization.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Maintain an enterprise-wide information security governance &amp; ISMS framework that
 
 
 </li>
 </ul>
 aligns with business objectives, regulatory requirements, and industry best practices.
 
 
 <ul>
 <li>
 Develop, maintain, and enforce security policies, standards, and procedures
 </li>
 <li>
 Lead strategic planning initiatives for security risk management, ensuring alignment
 
 
 </li>
 </ul>
 with ISO 27001 requirements.
 
 
 <ul>
 <li>
 Design, implement, and manage a security risk management framework that includes
 
 
 </li>
 </ul>
 risk assessments, control evaluations, and mitigation strategies.
 
 
 <ul>
 <li>
 Oversee and continuously improve the processes for vendor security risk assessments,
 
 
 </li>
 </ul>
 ensuring third-party risks are effectively managed.
 
 
 <ul>
 <li>
 Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the
 
 
 </li>
 </ul>
 effectiveness of security controls and risk mitigation efforts.
 
 
 <ul>
 <li>
 Oversee the development, implementation, and ongoing management of the
 
 
 </li>
 </ul>
 organization's security policies.
 
 
 <ul>
 <li>
 Prepare and lead the organization's readiness for external and internal security audits,
 
 
 </li>
 </ul>
 including ISO 27001 certification audits.
 
 
 <ul>
 <li>
 Build and run security awareness and phishing simulation programs and promote an
 
 
 </li>
 </ul>
 organization-wide culture of security accountability.
 
 
 <ul>
 <li>
 Ensure ongoing compliance with local regulatory frameworks, including those issued by
 
 
 </li>
 </ul>
 CBE, FRA, and related bodies.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 At least 4 years of experience in GRC, information security risk management or security
 
 
 </li>
 </ul>
 compliance roles.
 
 
 <ul>
 <li>
 Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are
 
 
 </li>
 </ul>
 preferred.
 
 
 <ul>
 <li>
 Demonstrated experience with ISO 27001 implementation, security audits, and vendor
 
 
 </li>
 </ul>
 security risk assessments.
 
 
 <ul>
 <li>
 Solid understanding of cloud architectures and security controls across AWS and
 
 
 </li>
 </ul>
 Google Cloud Platform (GCP).
 
 
 <ul>
 <li>
 Familiarity with regulatory requirements in Egypt and international data protection
 
 
 </li>
 </ul>
 laws.
 
 
 <ul>
 <li>
 University/college degree in a relevant professional field
 </li>
 <li>
 Excellent communication skills in English, both written and spoken
 </li>
 </ul>
</div>

Cyber Security GRC Lead

Thndr

<div>
 
 About The Role
 
 
 
 Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
 
 
 Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:
 
 
 <ul>
 <li>
 Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.
 </li>
 <li>
 Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.
 
 
 </li>
 </ul>
 This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.
 
 
 
 What You'll Do
 
 
 
 
 Security Strategy &amp; Program Ownership
 
 
 
 <ul>
 <li>
 Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.
 </li>
 <li>
 Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.
 </li>
 <li>
 Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.
 
 
 </li>
 </ul>
 
 Governance, Risk &amp; Compliance
 
 
 
 <ul>
 <li>
 Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.
 </li>
 <li>
 Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.
 </li>
 <li>
 Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.
 </li>
 <li>
 Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.
 
 
 </li>
 </ul>
 
 Security Engineering &amp; Technical Oversight
 
 
 
 <ul>
 <li>
 Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.
 </li>
 <li>
 Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.
 </li>
 <li>
 Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.
 </li>
 <li>
 Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.
 
 
 </li>
 </ul>
 
 Team &amp; Function Leadership
 
 
 
 <ul>
 <li>
 Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.
 </li>
 <li>
 Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.
 </li>
 <li>
 Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 
 What You'll Need
 
 
 
 <ul>
 <li>
 8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.
 </li>
 <li>
 Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.
 </li>
 <li>
 Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.
 </li>
 <li>
 Demonstrated ability to build and scale security programs in high-growth environments.
 
 
 </li>
 </ul>
 
 Domain Knowledge
 
 
 
 <ul>
 <li>
 Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.
 </li>
 <li>
 Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.
 
 
 </li>
 </ul>
 
 Frameworks &amp; Compliance
 
 
 
 <ul>
 <li>
 Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.
 </li>
 <li>
 Experience managing regulatory relationships and preparing board- and committee-level security reporting.
 
 
 </li>
 </ul>
 
 Leadership &amp; Communication
 
 
 
 <ul>
 <li>
 Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.
 </li>
 <li>
 A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.
 </li>
 <li>
 Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.
 </li>
 <li>
 Relevant certifications: CISSP, CISM, or equivalent.
 
 
 </li>
 </ul>
 
 Who Are We?
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 5.5 million app downloads
 </li>
 <li>
 EGP 1B+ average daily traded value across 2025
 </li>
 <li>
 #1 digital investing platform in Egypt for the third consecutive year
 </li>
 <li>
 76% of users are first-time investors
 </li>
 <li>
 40% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Head Of Information Security

RATP Dev Mobility Cairo

<div>
 
 Job Purpose
 
 
 
 The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.
 
 
 
 Responsibilities/Duties
 
 
 
 
 Profil de candidat recherch&eacute; :
 
 
 
 
 Cybersecurity Governance &amp; Strategy
 
 
 
 <ul>
 <li>
 Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.
 </li>
 <li>
 Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.
 </li>
 <li>
 Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.
 </li>
 <li>
 Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.
 
 
 </li>
 </ul>
 
 Security Operations &amp; SOC Management
 
 
 
 <ul>
 <li>
 Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.
 </li>
 <li>
 Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.
 </li>
 <li>
 Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.
 
 
 </li>
 </ul>
 
 Technical Security Oversight
 
 
 
 <ul>
 <li>
 Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.
 </li>
 <li>
 Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.
 </li>
 <li>
 Mandate and audit secure configuration standards and "Security by Design" principles across cloud infrastructure, and business applications.
 
 
 </li>
 </ul>
 
 Cybersecurity Risk Management
 
 
 
 <ul>
 <li>
 Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.
 </li>
 <li>
 Define and oversee the security vetting process for vendors and third-party partners.
 
 
 </li>
 </ul>
 
 Awareness, Training &amp; Culture
 
 
 
 <ul>
 <li>
 Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.
 </li>
 <li>
 Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.
 
 
 </li>
 </ul>
 
 Compliance, Audit &amp; Reporting
 
 
 
 <ul>
 <li>
 Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.
 </li>
 <li>
 Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.
 
 
 </li>
 </ul>
 
 Safety Responsibilities
 
 
 
 <ul>
 <li>
 Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.
 </li>
 <li>
 Comply with the requirements of RDMC RQHSE Policy and Safety Management System.
 </li>
 <li>
 Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).
 </li>
 <li>
 CISSP, CISM, or CISA certifications are preferred.
 </li>
 <li>
 ISO 27001 Lead Implementer or Lead Auditor is preferred.
 </li>
 <li>
 ITIL Foundation is a plus.
 </li>
 <li>
 Fluent in English and Arabic, French is a plus.
 
 
 </li>
 </ul>
 
 Knowledge
 
 
 
 <ul>
 <li>
 Advanced understanding of network security, cloud security, cryptography, and application security.
 </li>
 <li>
 Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.
 </li>
 <li>
 Proven experience managing SOC operations and security engineering team.
 </li>
 <li>
 Strong track record of cross-functional collaboration and stakeholder engagement.
 
 
 </li>
 </ul>
 
 Desired Behaviors &amp; Experiences
 
 
 
 <ul>
 <li>
 Influence &amp; Engagement: Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.
 </li>
 <li>
 Analytical Thinking: Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.
 </li>
 <li>
 Execution Excellence: Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.
 </li>
 <li>
 Change Agility: Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.
 </li>
 <li>
 Communication: Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.
 </li>
 <li>
 Collaboration: Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.
 </li>
 <li>
 Attention to Detail: Maintains accuracy and consistency in documentation, reporting, and system configurations.
 </li>
 <li>
 Accountability: Demonstrates ownership, responsibility, and reliability in delivering on objectives.
 </li>
 <li>
 Resilience: Remains composed under pressure, solves problems calmly, and stays focused on long-term results.
 </li>
 </ul>
</div>

Cybersecurity Manager

Alignerr

<div>
 
 Governance, Risk &amp; Compliance (GRC) Analyst (AI Training)
 
 
 
 
 About The Role
 
 
 
 We partner with the world's leading AI research teams and labs to build and train cutting-edge AI models. Right now, we're looking for experienced GRC professionals to help us develop high-quality datasets and evaluation frameworks for security and risk reasoning.
 
 
 Your real-world expertise in compliance programs, security policies, audits, and risk management will directly shape how AI understands and reasons about these critical domains. This is a rare opportunity to apply your professional knowledge to one of the most consequential technology challenges of our time &mdash; on your own schedule, from anywhere in the world.
 
 
 <ul>
 <li>
 Organization: Alignerr
 </li>
 <li>
 Type: Hourly Contract
 </li>
 <li>
 Location: Remote
 </li>
 <li>
 Commitment: 10&ndash;40 hours/week
 
 
 </li>
 </ul>
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Review and analyze security policies, controls, and procedures for accuracy and completeness
 </li>
 <li>
 Classify and evaluate real-world compliance scenarios across frameworks such as SOC 2, ISO 27001, and NIST
 </li>
 <li>
 Assess risk statements, control mappings, and audit-style documentation
 </li>
 <li>
 Generate and validate training and evaluation data used to improve AI reasoning in GRC contexts
 </li>
 <li>
 Provide structured, precise written feedback that helps AI systems learn from practitioner-level expertise
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 2+ years of hands-on experience in GRC, compliance, risk management, or information security
 </li>
 <li>
 Familiar with one or more major frameworks &mdash; SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar
 </li>
 <li>
 Comfortable reading, interpreting, and critiquing policy and audit-style documentation
 </li>
 <li>
 Detail-oriented with strong written reasoning and communication skills
 </li>
 <li>
 Self-motivated and reliable when working independently on asynchronous tasks
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Prior experience with data annotation, data quality review, or AI evaluation workflows
 </li>
 <li>
 Background in internal audit, third-party risk management, or security consulting
 </li>
 <li>
 Familiarity with AI safety or responsible AI concepts
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Work directly on frontier AI systems alongside top research labs
 </li>
 <li>
 Fully remote and flexible &mdash; work on your own schedule
 </li>
 <li>
 Freelance perks: autonomy, variety, and global collaboration
 </li>
 <li>
 Make a meaningful impact by teaching AI to reason about security and compliance the way real practitioners do
 </li>
 <li>
 Potential for ongoing work and contract extension
 </li>
 </ul>
</div>

Governance, Risk & Compliance (GRC) Analyst

ISS INTERNATIONAL SpA

<div>
 
 ISS International S.p.A. is looking for an IT/OT Cyber Security Lead for an onshore Oil &amp; Gas project in Algeria, within a high-standard industrial environment.
 
 
 
 
 Job Description
 
 The role involves acting as the Cyber Security focal point for industrial control systems across operational facilities, ensuring protection of OT/ICS environments, compliance with standards and coordination with operations and engineering teams.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 Proven experience in industrial cyber security for Oil &amp; Gas facilities
 </li>
 <li>
 Strong knowledge of OT / ICS / SCADA environments
 </li>
 <li>
 Familiarity with IEC 62443, NIST or equivalent cyber security frameworks
 </li>
 <li>
 Experience with cyber risk assessment and mitigation strategies
 </li>
 <li>
 Ability to interface with operations, IT and engineering teams
 </li>
 <li>
 Fluent English
 
 
 </li>
 </ul>
 
 Job Details
 
 
 
 <ul>
 <li>
 Location: Algeria &ndash; Desert Area (camp accommodation)
 </li>
 <li>
 Duration: 1 year, renewable
 </li>
 <li>
 Rotation: 28 days on / 28 days off
 </li>
 <li>
 Working time: 12 hours/day &ndash; 7 days/week
 </li>
 <li>
 Availability: May 2026
 
 
 </li>
 </ul>
 Interested professionals are invited to apply.
</div>

IT/OT Cyber Security Lead

geidea

<div>
 
 Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovation
 
 
 Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative &amp; Forward Thinkiking
 
 
 To maintain competitive advantage as we grow, we are currently looking for a new "
 
 Cybersecurity Defense Expert"
 
 
 
 
 
 
 
 Job purpose:
 
 
 
 The purpose of this role is to lead the defense against cyber threats through proactive SOC Monitoring, DFIR, Threat Intelligence, and Vulnerability Management, ensuring the integrity, confidentiality, and availability of information systems in all regions.
 
 
 
 
 
 
 Key accountabilities and decision ownership:
 
 
 <ul>
 <li>
 Lead and enhance SOC operations, focusing on real-time threat detection, incident response, and continuous monitoring.
 </li>
 <li>
 Coordinate digital forensics and incident response efforts to mitigate threats efficiently and reduce recovery time.
 </li>
 <li>
 Develop and implement a threat intelligence program to identify and counteract evolving cyber threat
 </li>
 <li>
 Manage the Vulnerability Management Program, including regular assessments, risk prioritization, and remediation strategies.
 </li>
 <li>
 Support the cybersecurity vision and strategy in alignment with defense operations and organizational goals.
 </li>
 <li>
 Oversee information security audits, whether by performed by organization or third-party personnel.
 </li>
 <li>
 Lead integration of standard and non-standard logs in SIEM.
 </li>
 <li>
 Create reports, dashboards, metrics for SOC operations and presentation to Senior Management.
 </li>
 <li>
 Lead team &amp; vendor management overall use of resources and initiation of corrective action where required for Security Operations Center.
 </li>
 <li>
 Develop and maintain enterprise Threat &amp; Vulnerability Management framework and necessary program operational capabilities that include identify, risk assess, and monitor of vulnerability and associated remediation.
 </li>
 <li>
 Maintain control effectiveness and continuously identify gaps in detection controls across the environment, including Geidea&rsquo;s cloud environments.
 </li>
 <li>
 Serve as the process owner of all ongoing activities related to the confidentiality, integrity and availability of information and resources of customers, business partners, employees, and business information, in compliance with the organization's Cyber and Information security policies.
 </li>
 <li>
 Evaluate team performance and build on people capabilities.
 </li>
 </ul>
 
 
 
 
 
 Must have technical / professional qualifications:
 
 
 <ul>
 <li>
 2-3 years of experience
 </li>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Technology, Telecommunications, Electronics &amp; Electrical or any related field.
 </li>
 <li>
 Certifications:
 </li>
 <li>
 GCIH
 </li>
 <li>
 GCFA
 </li>
 <li>
 Experience in cybersecurity architecture design.
 </li>
 <li>
 Experience in NESA IAR, SAMA CSF, PCI-DSS, NCA is a must.
 </li>
 </ul>
 
 
 
 
 Our values guide how we think and act - They describe what we care about the most.
 
 
 
 Customer first
 
 - It&rsquo;s embedded in our design thinking and customer service approach.
 
 
 
 Open
 
 - Openness allows us to constantly improve and evolve.
 
 
 
 Real
 
 - No jargon and no excuses!
 
 
 
 Bold
 
 - Constantly challenging ourselves and our way of thinking.
 
 
 
 Resilient
 
 &ndash; If we fail, we bounce back stronger than before.
 
 
 
 Collaborative
 
 - We know that we can achieve a lot more as a team.
 
 
 We are changing lives by constantly striving for a better solution.
 
 
 Click apply below and become part of the Geidea story
 
</div>

Cybersecurity Defense Expert

Capgemini

<div>
 
 About Capgemini
 
 
 
 Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of &euro;22 billion.
 
 
 
 Role Description
 
 
 
 Our Cyber Defense Unit is expanding, and we are looking for a talented Security Analyst to join our Incident Management &amp; Response (IMR) team. You will lead the lifecycle of major cybersecurity incidents, from identification through containment, eradication, and recovery, while coordinating with technical teams and executive stakeholders to ensure a timely and effective response.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead and coordinate end-to-end cybersecurity incident response activities, ensuring incidents are fully resolved and lessons learned are documented.
 </li>
 <li>
 Manage escalations from L1 and L2 SOC analysts and CISO teams, including complex or specialist investigations.
 </li>
 <li>
 Act as the primary point of contact for Group-level cyber incidents, collaborating closely with both analyst teams and executive stakeholders.
 </li>
 <li>
 Deliver clear, concise status updates for stakeholders at all levels.
 </li>
 <li>
 Prepare comprehensive incident reports tailored to both technical and non-technical audiences.
 </li>
 <li>
 Interpret and present technical cybersecurity subjects to executives.
 </li>
 <li>
 Conduct in-depth technical investigations using SIEM, HIPS/NIPS, EDR/AV, UBEA, and other monitoring tools.
 </li>
 <li>
 Perform threat and vulnerability analysis and provide advisory services to CISO teams and internal stakeholders.
 </li>
 <li>
 Provide oversight for specialized investigations such as digital forensics and investigative interviews, ensuring alignment with standards and legislation.
 </li>
 <li>
 Define, improve, and support incident response processes, playbooks, and methodologies.
 </li>
 <li>
 Contribute to audit support and maintain documentation.
 </li>
 <li>
 Provide regular metrics, reports, and trend analysis across weekly and monthly cycles.
 </li>
 <li>
 Analyze and improve the effectiveness of existing use cases.
 </li>
 <li>
 Develop and deliver documentation, knowledge articles, and visual materials.
 </li>
 <li>
 Support lessons learned sessions and contribute to improving the Cyber Defense Unit&rsquo;s maturity.
 </li>
 <li>
 Stay current on emerging threats, technologies, and regulatory changes.
 </li>
 <li>
 you may participate in: User awareness campaigns, Phishing simulations, Vulnerability management, Cyber-scenario exercises, Security assurance activities
 
 
 </li>
 </ul>
 
 Experience &amp; Qualifications
 
 
 
 <ul>
 <li>
 3+ years in Information Security or related fields.
 </li>
 <li>
 Incident management certifications such as CCIM, GCIH.
 </li>
 <li>
 Technical certifications such as GCFA, CHFI, CFCE.
 </li>
 <li>
 Vendor certifications such as CrowdStrike Falcon Responder, Splunk Cybersecurity Defense Analyst, EnCE.
 </li>
 <li>
 Experience with ITIL frameworks.
 </li>
 <li>
 Technical background in computing, networks, or programming.
 </li>
 <li>
 Familiarity with risk and control frameworks (e.g., NIST IR lifecycle, Cyber Kill Chain).
 </li>
 <li>
 Industry-recognized certifications such as CISSP or CISM.
 </li>
 <li>
 Proven experience handling cybersecurity incidents and risk management.
 </li>
 <li>
 Strong written and verbal communication skills in English.
 </li>
 <li>
 Experience in digital forensics, threat hunting, or enterprise‑scale incident response.
 </li>
 <li>
 Ability to manage multiple priorities in fast‑paced environments.
 </li>
 <li>
 Hands-on experience with SOC monitoring and intrusion detection tools (e.g., CrowdStrike, Splunk ES, VirusTotal Enterprise).
 </li>
 <li>
 Broad understanding of the cybersecurity threat landscape.
 </li>
 <li>
 Solid grasp of IT and security methodologies and technologies.
 
 
 </li>
 </ul>
 Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
 
 
 Get the future you want | www.capgemini.com
</div>

SOC IMR Analyst

Explore 523+ Cyber security grc lead in Cairo this April. Find roles across top companies and apply now to boost your career.