cyber security grc lead

Nawy

<div>
 We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
 
 
 in Nawy. This role ensures that security risks are identified, assessed, and managed while
 
 
 maintaining compliance with relevant regulatory and industry standards.
 
 
 The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
 
 
 manages security awareness, and partners closely with engineering, product, and legal teams
 
 
 to ensure secure-by-design operations across the entire organization.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Maintain an enterprise-wide information security governance &amp; ISMS framework that
 
 
 </li>
 </ul>
 aligns with business objectives, regulatory requirements, and industry best practices.
 
 
 <ul>
 <li>
 Develop, maintain, and enforce security policies, standards, and procedures
 </li>
 <li>
 Lead strategic planning initiatives for security risk management, ensuring alignment
 
 
 </li>
 </ul>
 with ISO 27001 requirements.
 
 
 <ul>
 <li>
 Design, implement, and manage a security risk management framework that includes
 
 
 </li>
 </ul>
 risk assessments, control evaluations, and mitigation strategies.
 
 
 <ul>
 <li>
 Oversee and continuously improve the processes for vendor security risk assessments,
 
 
 </li>
 </ul>
 ensuring third-party risks are effectively managed.
 
 
 <ul>
 <li>
 Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the
 
 
 </li>
 </ul>
 effectiveness of security controls and risk mitigation efforts.
 
 
 <ul>
 <li>
 Oversee the development, implementation, and ongoing management of the
 
 
 </li>
 </ul>
 organization's security policies.
 
 
 <ul>
 <li>
 Prepare and lead the organization's readiness for external and internal security audits,
 
 
 </li>
 </ul>
 including ISO 27001 certification audits.
 
 
 <ul>
 <li>
 Build and run security awareness and phishing simulation programs and promote an
 
 
 </li>
 </ul>
 organization-wide culture of security accountability.
 
 
 <ul>
 <li>
 Ensure ongoing compliance with local regulatory frameworks, including those issued by
 
 
 </li>
 </ul>
 CBE, FRA, and related bodies.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 At least 4 years of experience in GRC, information security risk management or security
 
 
 </li>
 </ul>
 compliance roles.
 
 
 <ul>
 <li>
 Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are
 
 
 </li>
 </ul>
 preferred.
 
 
 <ul>
 <li>
 Demonstrated experience with ISO 27001 implementation, security audits, and vendor
 
 
 </li>
 </ul>
 security risk assessments.
 
 
 <ul>
 <li>
 Solid understanding of cloud architectures and security controls across AWS and
 
 
 </li>
 </ul>
 Google Cloud Platform (GCP).
 
 
 <ul>
 <li>
 Familiarity with regulatory requirements in Egypt and international data protection
 
 
 </li>
 </ul>
 laws.
 
 
 <ul>
 <li>
 University/college degree in a relevant professional field
 </li>
 <li>
 Excellent communication skills in English, both written and spoken
 </li>
 </ul>
</div>

Cyber Security GRC Lead

Nawy Real Estate

<div>We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
in Nawy. This role ensures that security risks are identified, assessed, and managed while
maintaining compliance with relevant regulatory and industry standards.
The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
manages security awareness, and partners closely with engineering, product, and legal teams
to ensure secure-by-design operations across the entire organization.
Responsibilities<ul><li>Maintain an enterprise-wide information security governance &amp; ISMS framework that</li></ul>
aligns with business objectives, regulatory requirements, and industry best practices.<ul><li>Develop, maintain, and enforce security policies, standards, and procedures.</li><li>Lead strategic planning initiatives for security risk management, ensuring alignment</li></ul>
with ISO 27001 requirements.<ul><li>Design, implement, and manage a security risk management framework that includes</li></ul>
risk assessments, control evaluations, and mitigation strategies.<ul><li>Oversee and continuously improve the processes for vendor security risk assessments,</li></ul>
ensuring third-party risks are effectively managed.<ul><li>Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the</li></ul>
effectiveness of security controls and risk mitigation efforts.<ul><li>Oversee the development, implementation, and ongoing management of the</li></ul>
organization&rsquo;s security policies.<ul><li>Prepare and lead the organization&rsquo;s readiness for external and internal security audits,</li></ul>
including ISO 27001 certification audits.<ul><li>Build and run security awareness and phishing simulation programs and promote an</li></ul>
organization-wide culture of security accountability.<ul><li>Ensure ongoing compliance with local regulatory frameworks, including those issued by</li></ul>
CBE, FRA, and related bodies. 
Requirements<ul><li> 
At least 4 years of experience in GRC, information security risk management or security</li></ul>
compliance roles.<ul><li>Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are</li></ul>
preferred.<ul><li>Demonstrated experience with ISO 27001 implementation, security audits, and vendor</li></ul>
security risk assessments.<ul><li>Solid understanding of cloud architectures and security controls across AWS and</li></ul>
Google Cloud Platform (GCP).<ul><li>Familiarity with regulatory requirements in Egypt and international data protection</li></ul>
laws.<ul><li>University/college degree in a relevant professional field.</li><li>Excellent communication skills in English, both written and spoken.</li></ul></div>

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Junior GRC Analyst to join our Cyber Risk, GRC &amp; Regulatory team. You will support delivery of governance, risk, and compliance engagements for international clients &mdash; conducting gap analyses, developing policies, executing risk assessments, supporting audits, and mapping controls across ISO 27001, NIST, PCI DSS, SOC 2, and more. This is a consultancy delivery role: real client projects from day one.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Conduct gap analyses against ISO/IEC 27000 family (27001, 27002, 27005, 27701) and support remediation plans</li>
<li>Develop, review, and maintain information security policies, standards, and procedures</li>
<li>Execute risk assessments: identify threats/vulnerabilities, evaluate likelihood/impact, maintain risk registers</li>
<li>Support internal and external audits: gather evidence, review controls, track findings</li>
<li>Conduct vendor and third-party risk assessments</li>
<li>Map and crosswalk controls across ISO 27001, NIST CSF v2, NIST SP 800-53, PCI DSS, SOC 2</li>
<li>Develop Statements of Applicability (SoA), BCPs, and ISMS documentation</li>
<li>Prepare client deliverables: gap reports, risk outputs, policy docs, compliance summaries</li>
<li>Leverage AI tools (Claude, ChatGPT) for research, policy drafting, control mapping</li>
<li>Collaborate with SOC, offensive security, and architecture teams on control validation</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in Cybersecurity, Information Security, IT, Computer Science, or related</li>
<li>0&ndash;1 year in GRC, information security, compliance, or IT audit (internships count)</li>
<li>Solid understanding of the ISO/IEC 27000 family (27001, 27002, 27005) &mdash; a must</li>
<li>Familiarity with NIST CSF v2, RMF, SP 800-53 &mdash; highly preferred</li>
<li>Familiarity with PCI DSS and SOC 2 &mdash; highly preferred</li>
<li>Fluent English (written and spoken)</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Strong technical writing skills</li>
<li>CISSP, CASP+, or VICI VCGP &mdash; a major plus</li>
<li>VICI VCGA, Security+, ISC2 CC, ISO 27001 LI/LA, CISA, CRISC &mdash; a plus</li>
<li>GRC platforms (ServiceNow, Archer, OneTrust) &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior GRC Analyst

help AG

<div>Help AG is looking for a talented and experienced IT Solution Architect - Pre-Sales who will have a key role in discovering opportunities and in positioning Help AG&rsquo;s security solutions to customers and prospects and creating technical content for proposals and RFP responses. The IT Solution Architect - Pre-Sales will have a critical role in ensuring the success of Proof of Concepts. During and post implementation, the IT Solution Architect - Pre-Sales will be tasked with ensuring customer success (from a technology architecture and a solutions point of view), ensuring alignment with the implementation team and detecting cross-selling and up-selling opportunities. 
 
 
Responsibilities: 
<ul><li>
Discovering opportunities, positioning Help AG&rsquo;s security increased business services to customers and prospects and creating technical content for proposals and RFP responses.</li><li>
Ensuring the success of Proof of Concepts.</li><li>
During and post implementation, the Solution Architect will be tasked with ensuring customer success (from a technology architecture and a solutions point of view), ensuring alignment with the delivery units and detecting cross-selling and up-selling opportunities.</li><li>
Lead technical workshops, assessments and solution demonstrations (including architecture reviews and security maturity assessments) to influence customer decision-making and drive solution adoption.</li><li>
Collaborate with internal sales, delivery and vendor teams to develop competitive solution strategies, ensure technical accuracy in proposals, and align offerings with customer requirements and industry best practices.</li><li>
Ensure Help AG&rsquo;s success in the market and strongly sales-focused to ensure increased business.</li></ul> 
Qualifications &amp; Skills:<ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology or related field from a related field
</li><li>Minimum 8-10 years of relevant work experience in IT Solution Architecture with strong exposure to Security consulting or a relevant role</li><li>
Prior experience in pre-sales, solution consulting or technical sales support, preferably within a system integrator environment.
</li><li>Excellent understanding of Cyber, and information security challenges and strategies.</li><li>
Prior experience in positioning managed security services.</li><li>
Hands-on solution-level expertise across key-technologies:<ul><li>
Network &amp; Security: Palo Alto, Fortinet, F5</li><li>
SIEM &amp; Analytics: Splunk</li><li>
Vulnerability Management: Tenable</li><li>
Threat Detection &amp; Response: Vectra, Trend Micro</li><li>
File Security &amp; Data Protection: OPSWAT</li></ul></li><li>
Prior experience in positioning GRC and VAPT services.</li><li>
Strong consulting skills covering both technical as well as commercial understanding of an opportunity.</li><li>
Relevant cybersecurity certifications from leading vendors and/or vendor-neutral organizations (e.g., security, cloud, or network certifications)</li><li>
Solid understanding of technology from both a technical as well as a concept perspective.</li><li>
Strong pedagogical skills in explaining difficult technical concepts in an easy-to-understand way</li><li>
Solid business acumen.</li><li>
Excellent report/technical documentation writing skills.</li><li>
Strong presentation skills.</li><li>
Flexible work approach based on the requirements of the job.</li><li>
Team player and optimistic.</li><li>
Customer centric and independent in work.</li><li>
Fluency in Arabic and English (Mandatory) - both written and verbal skills</li></ul> 
Benefits: 
<ul><li>
Benefits as per labor law - Egypt</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Open Door Policy.</li></ul> 
About Us: 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses and governments across the Middle East with strategic consultancy combined with tailored information security services and solutions that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in Feb 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor agnostic, trustworthy, independent, and cybersecurity focused. With best-of-breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

IT Solution Architect - Pre-Sales

Thndr

<div>
 
 About The Role
 
 
 
 Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
 
 
 Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:
 
 
 <ul>
 <li>
 Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.
 </li>
 <li>
 Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.
 
 
 </li>
 </ul>
 This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.
 
 
 
 What You'll Do
 
 
 
 
 Security Strategy &amp; Program Ownership
 
 
 
 <ul>
 <li>
 Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.
 </li>
 <li>
 Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.
 </li>
 <li>
 Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.
 
 
 </li>
 </ul>
 
 Governance, Risk &amp; Compliance
 
 
 
 <ul>
 <li>
 Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.
 </li>
 <li>
 Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.
 </li>
 <li>
 Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.
 </li>
 <li>
 Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.
 
 
 </li>
 </ul>
 
 Security Engineering &amp; Technical Oversight
 
 
 
 <ul>
 <li>
 Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.
 </li>
 <li>
 Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.
 </li>
 <li>
 Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.
 </li>
 <li>
 Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.
 
 
 </li>
 </ul>
 
 Team &amp; Function Leadership
 
 
 
 <ul>
 <li>
 Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.
 </li>
 <li>
 Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.
 </li>
 <li>
 Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 
 What You'll Need
 
 
 
 <ul>
 <li>
 8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.
 </li>
 <li>
 Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.
 </li>
 <li>
 Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.
 </li>
 <li>
 Demonstrated ability to build and scale security programs in high-growth environments.
 
 
 </li>
 </ul>
 
 Domain Knowledge
 
 
 
 <ul>
 <li>
 Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.
 </li>
 <li>
 Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.
 
 
 </li>
 </ul>
 
 Frameworks &amp; Compliance
 
 
 
 <ul>
 <li>
 Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.
 </li>
 <li>
 Experience managing regulatory relationships and preparing board- and committee-level security reporting.
 
 
 </li>
 </ul>
 
 Leadership &amp; Communication
 
 
 
 <ul>
 <li>
 Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.
 </li>
 <li>
 A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.
 </li>
 <li>
 Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.
 </li>
 <li>
 Relevant certifications: CISSP, CISM, or equivalent.
 
 
 </li>
 </ul>
 
 Who Are We?
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 5.5 million app downloads
 </li>
 <li>
 EGP 1B+ average daily traded value across 2025
 </li>
 <li>
 #1 digital investing platform in Egypt for the third consecutive year
 </li>
 <li>
 76% of users are first-time investors
 </li>
 <li>
 40% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Head Of Information Security

<div>About The Role
Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:<ul><li>
Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.</li><li>
Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.</li></ul>
This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.
What You'll Do
Security Strategy &amp; Program Ownership<ul><li>
Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.</li><li>
Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.</li><li>
Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.</li></ul>
Governance, Risk &amp; Compliance<ul><li>
Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.</li><li>
Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.</li><li>
Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.</li><li>
Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.</li></ul>
Security Engineering &amp; Technical Oversight<ul><li>
Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.</li><li>
Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.</li><li>
Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.</li><li>
Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.</li></ul>
Team &amp; Function Leadership<ul><li>
Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.</li><li>
Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.</li><li>
Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.</li></ul>
What You'll Need
Experience<ul><li>
8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.</li><li>
Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.</li><li>
Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.</li><li>
Demonstrated ability to build and scale security programs in high-growth environments.</li></ul>
Domain Knowledge<ul><li>
Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.</li><li>
Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.</li></ul>
Frameworks &amp; Compliance<ul><li>
Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.</li><li>
Experience managing regulatory relationships and preparing board- and committee-level security reporting.</li></ul>
Leadership &amp; Communication<ul><li>
Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.</li><li>
A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.</li><li>
Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.</li></ul>
Nice to Have<ul><li>
Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.</li><li>
Relevant certifications: CISSP, CISM, or equivalent.</li></ul>
Who Are We?
Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:<ul><li>
High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.</li><li>
Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.</li><li>
Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.</li></ul>
We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:<ul><li>
5.5 million app downloads</li><li>
EGP 1B+ average daily traded value across 2025</li><li>
#1 digital investing platform in Egypt for the third consecutive year</li><li>
76% of users are first-time investors</li><li>
40% of our users come from outside of capital cities and have previously had limited access to financial institutions</li></ul>
Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
Rumble was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
At Thndr, we're looking for people driven by our mission to help us democratize investing across the MENA region.</div>

Arrow Components

<div>
 
 Position
 
 
 
 Senior IT Security Compliance Engineer
 
 
 
 Job Description
 
 
 
 The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization&rsquo;s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.
 </li>
 <li>
 Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.
 </li>
 <li>
 Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.
 </li>
 <li>
 Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.
 </li>
 <li>
 Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.
 </li>
 <li>
 Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.
 </li>
 <li>
 Prepare and deliver security metrics, compliance reports, and executive-level summaries.
 </li>
 <li>
 Provide security awareness, training, and education to employees to promote a strong security culture across the organization.
 </li>
 <li>
 Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.
 
 
 </li>
 </ul>
 
 Requirements And Qualifications
 
 
 
 <ul>
 <li>
 Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.
 </li>
 <li>
 Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.
 </li>
 <li>
 GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.
 </li>
 <li>
 Experience working in SaaS or technology-driven environments is highly desirable.
 </li>
 <li>
 Familiarity with cloud computing platforms and cloud security principles.
 </li>
 <li>
 Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.
 </li>
 <li>
 Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.
 </li>
 <li>
 Bachelor&rsquo;s degree in Computer Engineering, Computer Science, Information Security, or a related field.
 
 
 </li>
 </ul>
 
 Location:
 
 
 
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 
 
 
 Time Type
 
 
 
 Full time
 
 
 
 Job Category
 
 
 
 Information Technology
</div>

Senior IT Security Compliance Engineer

Explore 1566+ Cyber security grc lead in Egypt this May. Find roles across top companies and apply now to boost your career.

1566 cyber security grc lead jobs In Egypt

Cyber Security GRC Lead

Cyber Security GRC Lead

Junior GRC Analyst

IT Solution Architect - Pre-Sales

Head Of Information Security

Head Of Information Security

Senior IT Security Compliance Engineer