assistant manager - commercial | asset development | real estate

assistant manager - projects | asset management | real estate

ceo assistant / office manager (fluent speaker)

accountant – accounts receivable (junior)

admin assistant

administrative assistant

assistant manager - commercial | asset development | real estate Jobs in Cairo

assistant manager - projects | asset management | real estate Jobs in Cairo

ceo assistant / office manager (fluent speaker) Jobs in Cairo

executive assistant governance risk compliance property

MAGRABi Retail Group

<div>
 
 
 Job Purpose
 
 
 
 Provide administrative support and coordination for direct manager travel plans, meetings, conferences, and correspondences in addition to managing the executive&rsquo;s personal and business calendar, including making appointments and prioritizing the most sensitive matters, and any other special projects to enable the direct manager to properly manage their time and achieve their targets, along with maintaining comprehensive and accurate records and performing minor accounting duties.
 
 
 
 
 
 
 Qualifications and Education:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree of business administration &ndash; preferably business or finance major.
 </li>
 <li>
 Communication and relationship management skills
 </li>
 <li>
 Strong PR and interpersonal skills
 </li>
 </ul>
 
 
 
 
 Experience:
 
 
 <ul>
 <li>
 8 - 10 years&rsquo; experience in the field of office management with at least 5 years working with executives&rsquo; representative
 </li>
 </ul>
 
 
 
 
 
 
 
 
 JOB RESPONSIBILITIES
 
 
 <ul>
 <li>
 Plan for the whole year, in conjunction with the Executive, calendar based on set targets and activities to ensure proper settings of travel, meetings, conferences, strategic meetings, and committees.
 </li>
 <li>
 Handle and coordinate all travel logistics for all business and personal trips requested by the Executive in alignment with the set travel budget, to ensure all trips are successful.
 </li>
 <li>
 Plan and schedule for all internal and external meetings and coordinate with all attendees to effectively manage the Executive time and ensure sustainability of all department operations.
 </li>
 <li>
 Attend all meetings to collect, analyze and communicate all meeting minutes with all stakeholders and follow up on assignments to maintain all meetings effectiveness.
 </li>
 <li>
 Act as the Executive delegate, to attend meetings on his/her behalf with internal and external parties to maximize the Executive ability to multitask and manage their priorities.
 </li>
 <li>
 Handle VIP meetings logistics whether held at the company premises or externally and represent the Executive with guests and visitors to maintain the company image.
 </li>
 <li>
 Control the Executive budget in terms of travel, stationary, meetings and any other miscellaneous expenses and ensure it doesn&rsquo;t exceed the set limits.
 </li>
 <li>
 Build and sustain positive strong relationships with internal co-workers and managers and external parties, such as: vendors, banks, suppliers, hotels, and travel agencies to facilitate the Executive job responsibilities.
 </li>
 <li>
 Handle all Executive&rsquo;s personal and business bills payment and issuance on time to avoid delays and penalties.
 </li>
 <li>
 Handle Executive&rsquo;s personal and business PR to ensure their connectivity and update with all business-related news and communities to enable effective relationship management.
 </li>
 <li>
 Filter and review the Executive&rsquo;s e-mails, reply to inquiries and business e-mails, and prepare business briefings and reporting to support the Executive in managing their time more effectively.
 </li>
 <li>
 Follow up on projects with stakeholders and subordinates to ensure getting all the work done on time.
 </li>
 <li>
 Plan and coordinate direct reports vacations and leaves plans on calendar and on system to maintain availability of required authorizations in order not to hinder operations.
 </li>
 <li>
 Act as gate keeper for all issues, requests and conflicts that may arise and need the Executive&rsquo;s input to limit or diminish any sort of disturbance or waste of time for the Executive to facilitate accomplishing their job effectively.
 </li>
 <li>
 File and archive all important files and documents and maintain their confidentiality to enable ease of access and information retrieval.
 </li>
 <li>
 Take part and handle company special projects and events as requested in coordination with other Assistants and Executives and ensure those projects are completed successfully.
 </li>
 </ul>
</div>

Executive Assistant - Governance, Risk, Compliance & Property

Confidential

<div>
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Assess, restructure, and strengthen the Group Legal function to align with business growth strategy.
 </li>
 <li>
 Establish clear governance, policies, and reporting structures across all subsidiaries.
 </li>
 <li>
 Build and develop a high-performing legal and compliance team.
 </li>
 <li>
 Optimize use of external counsel and manage legal budgets efficiently.
 </li>
 <li>
 Lead legal aspects of mergers, acquisitions, divestments, joint ventures, and investments.
 </li>
 <li>
 Oversee legal due diligence processes and risk assessments.
 </li>
 <li>
 Structure transactions to protect Group interests and ensure regulatory compliance.
 </li>
 <li>
 Draft and negotiate complex transaction agreements.
 </li>
 <li>
 Ensure adherence to local and international regulations.
 </li>
 <li>
 Lead regulatory engagements, investigations, and corporate filings.
 </li>
 <li>
 Strengthen corporate governance practices at the Board and subsidiary levels.
 </li>
 <li>
 Act as primary legal advisor to the CEO and Board of Directors.
 </li>
 <li>
 Provide strategic guidance on risk exposure, expansion strategy, and corporate structuring.
 </li>
 <li>
 Lead crisis management from a legal and reputational risk perspective.
 </li>
 <li>
 Protect the Group&rsquo;s assets, intellectual property, and commercial interests.
 </li>
 </ul>
 
 
 
 
 
 Job Requirement
 
 
 
 
 
 
 
 Education
 
 
 <ul>
 <li>
 Law degree
 </li>
 </ul>
 
 
 Certificates
 
 
 <ul>
 <li>
 Master&rsquo;s in law, Business Law, or related field preferred
 </li>
 </ul>
 
 
 Experience
 
 
 <ul>
 <li>
 15+ years of progressive legal experience, including senior leadership roles.
 </li>
 <li>
 Strong experience in M&amp;A, due diligence, corporate structuring, and regulatory compliance.
 </li>
 <li>
 Experience within large groups / holding companies is highly preferred.
 </li>
 <li>
 Exposure to multi-entity or multi-country operations is a strong advantage.
 </li>
 </ul>
 
 
 Technical Tools and Experience
 
 
 
 Proficiency in MS Office; experience with ERP systems is preferred.
 
 
 
 Additional Qualifications
 
 
 <ul>
 <li>
 Strategic business mindset
 </li>
 <li>
 Executive presence with proven Board-level communication skills
 </li>
 <li>
 Extensive expertise in transaction structuring and M&amp;A execution
 </li>
 <li>
 Demonstrated leadership in corporate governance and regulatory compliance
 </li>
 <li>
 Fluent in English and French (written and spoken)
 </li>
 </ul>
</div>

Chief Legal Officer

Thndr

<div>
 
 About The Role
 
 
 
 We are looking for a
 
 Senior Governance, Risk, and Compliance (GRC) professional
 
 to lead and strengthen our compliance and risk management program across multiple frameworks, entities, and geographies. The ideal candidate will have strong hands-on experience with
 
 SOC 2
 
 ,
 
 ISO 27001
 
 ,
 
 PCI DSS
 
 , and modern compliance automation platforms such as
 
 Sprinto
 
 , with the ability to build and operate a
 
 hybrid unified GRC framework
 
 for multi-geographical entities.
 
 
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Lead the design, implementation, and continuous improvement of the organization&rsquo;s Governance, Risk, and Compliance program.
 </li>
 <li>
 Manage compliance initiatives across key frameworks including SOC 2, ISO 27001, PCI DSS, and other applicable standards or regulations.
 </li>
 <li>
 Build and maintain a hybrid unified GRC framework that enables a common control structure across multiple legal entities, business units, and geographical regions.
 </li>
 <li>
 Align global baseline controls with local regulatory, legal, privacy, and operational requirements.
 </li>
 <li>
 Perform risk assessments, compliance gap assessments, control reviews, and remediation tracking.
 </li>
 <li>
 Develop, maintain, and improve policies, standards, procedures, and control documentation.
 </li>
 <li>
 Own audit readiness activities including evidence collection, control walkthroughs, auditor coordination, and remediation follow-up.
 </li>
 <li>
 Drive cross-framework control mapping to reduce duplication and improve audit efficiency across multiple compliance programs.
 </li>
 <li>
 Work closely with Engineering, Information Technology, Security, Legal, Privacy, Human Resources, and business teams to embed compliance requirements into operations.
 </li>
 <li>
 Manage third-party risk assessments, vendor due diligence, and ongoing compliance reviews for critical suppliers.
 </li>
 <li>
 Define and monitor Governance, Risk, and Compliance metrics, compliance status reporting, and executive dashboards.
 </li>
 <li>
 Support security awareness, policy governance, exception management, and ongoing program maturity improvements.
 </li>
 <li>
 Track regulatory and framework changes and assess their impact across all relevant entities and regions.
 
 
 </li>
 </ul>
 
 What You'll Need
 
 
 
 <ul>
 <li>
 5+ years of experience in Governance, Risk, and Compliance, Information Security, Audit, or a related field.
 </li>
 <li>
 Strong practical experience with SOC 2, ISO 27001, and PCI DSS including implementation, control mapping, readiness assessments, evidence collection, and audit support.
 </li>
 <li>
 Proven experience working with compliance automation / GRC platforms such as Sprinto, Drata, Vanta, or similar tools.
 </li>
 <li>
 Experience building or managing a unified control framework that maps multiple standards into a centralized and scalable compliance model.
 </li>
 <li>
 Experience supporting multi-entity and multi-geographical compliance programs with both centralized governance and localized compliance requirements.
 </li>
 <li>
 Strong understanding of risk management, control design, issue tracking, remediation planning, and compliance operations.
 </li>
 <li>
 Experience writing and maintaining policies, standards, procedures, and governance documentation.
 </li>
 <li>
 Good understanding of third-party risk management, supplier due diligence, and control assurance processes.
 </li>
 <li>
 Strong knowledge of core security and compliance domains such as access control, asset management, vulnerability management, incident management, change management, and business continuity.
 </li>
 <li>
 Experience working with auditors, control owners, leadership teams, and cross-functional stakeholders.
 </li>
 <li>
 Strong communication, organization, and documentation skills.
 </li>
 <li>
 Experience in regulated industries such as fintech, payments, healthcare, Software as a Service, or cloud environments.
 </li>
 <li>
 Familiarity with cloud compliance and shared responsibility models across Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
 </li>
 <li>
 Relevant certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Certified Information Systems Security Professional, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or PCI Professional is a plus.
 
 
 </li>
 </ul>
 
 Who Are We?
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 5.5 million app downloads
 </li>
 <li>
 EGP 1B+ average daily traded value across 2025
 </li>
 <li>
 #1 digital investing platform in Egypt for the third consecutive year
 </li>
 <li>
 76% of users are first-time investors
 </li>
 <li>
 40% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Senior GRC Security Engineer

<div>
 
 About The Role
 
 
 
 Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
 
 
 Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:
 
 
 <ul>
 <li>
 Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.
 </li>
 <li>
 Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.
 
 
 </li>
 </ul>
 This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.
 
 
 
 
 What You'll Do
 
 
 
 
 
 Security Strategy &amp; Program Ownership
 
 
 
 <ul>
 <li>
 Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.
 </li>
 <li>
 Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.
 </li>
 <li>
 Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.
 
 
 </li>
 </ul>
 
 Governance, Risk &amp; Compliance
 
 
 
 <ul>
 <li>
 Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.
 </li>
 <li>
 Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.
 </li>
 <li>
 Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.
 </li>
 <li>
 Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.
 
 
 </li>
 </ul>
 
 Security Engineering &amp; Technical Oversight
 
 
 
 <ul>
 <li>
 Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.
 </li>
 <li>
 Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.
 </li>
 <li>
 Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.
 </li>
 <li>
 Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.
 
 
 </li>
 </ul>
 
 Team &amp; Function Leadership
 
 
 
 <ul>
 <li>
 Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.
 </li>
 <li>
 Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.
 </li>
 <li>
 Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.
 
 
 </li>
 </ul>
 
 
 What You'll Need
 
 
 
 
 
 Experience
 
 
 
 <ul>
 <li>
 8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.
 </li>
 <li>
 Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.
 </li>
 <li>
 Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.
 </li>
 <li>
 Demonstrated ability to build and scale security programs in high-growth environments.
 
 
 </li>
 </ul>
 
 Domain Knowledge
 
 
 
 <ul>
 <li>
 Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.
 </li>
 <li>
 Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.
 
 
 </li>
 </ul>
 
 Frameworks &amp; Compliance
 
 
 
 <ul>
 <li>
 Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.
 </li>
 <li>
 Experience managing regulatory relationships and preparing board- and committee-level security reporting.
 
 
 </li>
 </ul>
 
 Leadership &amp; Communication
 
 
 
 <ul>
 <li>
 Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.
 </li>
 <li>
 A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.
 </li>
 <li>
 Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.
 </li>
 <li>
 Relevant certifications: CISSP, CISM, or equivalent.
 
 
 </li>
 </ul>
 
 
 Who Are We?
 
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 5.5 million app downloads
 </li>
 <li>
 EGP 1B+ average daily traded value across 2025
 </li>
 <li>
 #1 digital investing platform in Egypt for the third consecutive year
 </li>
 <li>
 76% of users are first-time investors
 </li>
 <li>
 40% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Head Of Information Security

Arrow Components

<div>
 
 Position
 
 
 
 Senior IT Security Compliance Engineer
 
 
 
 Job Description
 
 
 
 The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization&rsquo;s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.
 </li>
 <li>
 Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.
 </li>
 <li>
 Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.
 </li>
 <li>
 Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.
 </li>
 <li>
 Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.
 </li>
 <li>
 Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.
 </li>
 <li>
 Prepare and deliver security metrics, compliance reports, and executive-level summaries.
 </li>
 <li>
 Provide security awareness, training, and education to employees to promote a strong security culture across the organization.
 </li>
 <li>
 Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.
 
 
 </li>
 </ul>
 
 Requirements And Qualifications
 
 
 
 <ul>
 <li>
 Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.
 </li>
 <li>
 Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.
 </li>
 <li>
 GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.
 </li>
 <li>
 Experience working in SaaS or technology-driven environments is highly desirable.
 </li>
 <li>
 Familiarity with cloud computing platforms and cloud security principles.
 </li>
 <li>
 Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.
 </li>
 <li>
 Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.
 </li>
 <li>
 Bachelor&rsquo;s degree in Computer Engineering, Computer Science, Information Security, or a related field.
 
 
 </li>
 </ul>
 
 Location:
 
 
 
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 
 
 
 Time Type
 
 
 
 Full time
 
 
 
 Job Category
 
 
 
 Information Technology
</div>

Senior IT Security Compliance Engineer

Raya CX

<div>
 What will you do?
 
 
 
 1. Contract Management &amp; Governance
 
 
 
 Manage the end-to-end contract lifecycle, including drafting, review, negotiation, execution, amendment, renewal, and termination of contracts.
 
 
 Ensure all contracts comply with applicable laws, regulatory requirements, and internal policies.
 
 
 Maintain and regularly update standardized contract templates, clauses, and playbooks to ensure alignment with corporate governance and risk appetite.
 
 
 Monitor contractual obligations, milestones, SLAs, penalties, and renewal dates to ensure compliance, timely action, and smooth execution of agreements.
 
 
 
 2. Legal Risk &amp; Compliance Management
 
 
 
 Identify, assess, and mitigate legal and contractual risks across all agreements.
 
 
 Escalate high-risk clauses or deviations to the Legal &amp; Corporate Governance Senior Manager with clear recommendations.
 
 
 Stay up to date with applicable regulatory requirements (e.g., CBE, NTRA, data protection law, labor law) and ensure alignment across all contracts.
 
 
 Support internal and external audits by preparing and providing contract documentation, risk assessments, and compliance evidence.
 
 
 
 3. Legal Operations &amp; Department Management
 
 
 
 Support the Legal &amp; Corporate Governance Senior Manager in managing day-to-day legal operations.
 
 
 Track legal requests, turnaround times, and workload prioritization to ensure service efficiency.
 
 
 Coordinate with external legal counsel when required, ensuring proper documentation and timely follow-ups.
 
 
 Maintain and manage an organized legal repository for contracts, legal opinions, approvals, and correspondence.
 
 
 
 4. Stakeholder &amp; Cross-Functional Management
 
 
 
 Act as a key point of contact between Legal and internal stakeholders (Account Management, Operations, Finance, Procurement, IT).
 
 
 Provide contractual guidance and legal support to business teams during negotiations and client discussions.
 
 
 Clearly communicate legal requirements, risks, and contractual obligations to non-legal stakeholders.
 
 
 
 5. Policy, Process &amp; Continuous Improvement
 
 
 
 Develop and enhance contract management processes, approval workflows, and governance controls.
 
 
 Recommend and implement improvements to optimize efficiency, reduce risk exposure, and enhance operational effectiveness.
 
 
 
 6. Reporting &amp; Management Updates
 
 
 
 Prepare and manage periodic reports on contract status, risks, renewals, disputes, and compliance matters.
 
 
 Provide insights and recommendations to support informed decision-making at the management level
 
 
 Required Qualifications:
 
 
 1. from 6 to 8 years of experience
 
 
 <ul>
 <li>
 Faculty of law &ndash; English section is preferred but not mandatory
 
 </li>
 </ul>
</div>

Legal & Contract Specialist

Nawy

<div>
 We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
 
 
 in Nawy. This role ensures that security risks are identified, assessed, and managed while
 
 
 maintaining compliance with relevant regulatory and industry standards.
 
 
 The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
 
 
 manages security awareness, and partners closely with engineering, product, and legal teams
 
 
 to ensure secure-by-design operations across the entire organization.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Maintain an enterprise-wide information security governance &amp; ISMS framework that
 
 
 </li>
 </ul>
 aligns with business objectives, regulatory requirements, and industry best practices.
 
 
 <ul>
 <li>
 Develop, maintain, and enforce security policies, standards, and procedures
 </li>
 <li>
 Lead strategic planning initiatives for security risk management, ensuring alignment
 
 
 </li>
 </ul>
 with ISO 27001 requirements.
 
 
 <ul>
 <li>
 Design, implement, and manage a security risk management framework that includes
 
 
 </li>
 </ul>
 risk assessments, control evaluations, and mitigation strategies.
 
 
 <ul>
 <li>
 Oversee and continuously improve the processes for vendor security risk assessments,
 
 
 </li>
 </ul>
 ensuring third-party risks are effectively managed.
 
 
 <ul>
 <li>
 Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the
 
 
 </li>
 </ul>
 effectiveness of security controls and risk mitigation efforts.
 
 
 <ul>
 <li>
 Oversee the development, implementation, and ongoing management of the
 
 
 </li>
 </ul>
 organization's security policies.
 
 
 <ul>
 <li>
 Prepare and lead the organization's readiness for external and internal security audits,
 
 
 </li>
 </ul>
 including ISO 27001 certification audits.
 
 
 <ul>
 <li>
 Build and run security awareness and phishing simulation programs and promote an
 
 
 </li>
 </ul>
 organization-wide culture of security accountability.
 
 
 <ul>
 <li>
 Ensure ongoing compliance with local regulatory frameworks, including those issued by
 
 
 </li>
 </ul>
 CBE, FRA, and related bodies.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 At least 4 years of experience in GRC, information security risk management or security
 
 
 </li>
 </ul>
 compliance roles.
 
 
 <ul>
 <li>
 Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are
 
 
 </li>
 </ul>
 preferred.
 
 
 <ul>
 <li>
 Demonstrated experience with ISO 27001 implementation, security audits, and vendor
 
 
 </li>
 </ul>
 security risk assessments.
 
 
 <ul>
 <li>
 Solid understanding of cloud architectures and security controls across AWS and
 
 
 </li>
 </ul>
 Google Cloud Platform (GCP).
 
 
 <ul>
 <li>
 Familiarity with regulatory requirements in Egypt and international data protection
 
 
 </li>
 </ul>
 laws.
 
 
 <ul>
 <li>
 University/college degree in a relevant professional field
 </li>
 <li>
 Excellent communication skills in English, both written and spoken
 </li>
 </ul>
</div>

Cyber Security GRC Lead

Explore 254+ Executive assistant governance risk compliance property in Cairo this May. Find roles across top companies and apply now to boost your career.