information security manager

RATP Dev Mobility Cairo

<div>
 
 Job Purpose
 
 
 
 The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.
 
 
 
 Responsibilities/Duties
 
 
 
 
 Profil de candidat recherch&eacute; :
 
 
 
 
 Cybersecurity Governance &amp; Strategy
 
 
 
 <ul>
 <li>
 Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.
 </li>
 <li>
 Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.
 </li>
 <li>
 Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.
 </li>
 <li>
 Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.
 
 
 </li>
 </ul>
 
 Security Operations &amp; SOC Management
 
 
 
 <ul>
 <li>
 Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.
 </li>
 <li>
 Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.
 </li>
 <li>
 Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.
 
 
 </li>
 </ul>
 
 Technical Security Oversight
 
 
 
 <ul>
 <li>
 Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.
 </li>
 <li>
 Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.
 </li>
 <li>
 Mandate and audit secure configuration standards and "Security by Design" principles across cloud infrastructure, and business applications.
 
 
 </li>
 </ul>
 
 Cybersecurity Risk Management
 
 
 
 <ul>
 <li>
 Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.
 </li>
 <li>
 Define and oversee the security vetting process for vendors and third-party partners.
 
 
 </li>
 </ul>
 
 Awareness, Training &amp; Culture
 
 
 
 <ul>
 <li>
 Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.
 </li>
 <li>
 Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.
 
 
 </li>
 </ul>
 
 Compliance, Audit &amp; Reporting
 
 
 
 <ul>
 <li>
 Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.
 </li>
 <li>
 Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.
 
 
 </li>
 </ul>
 
 Safety Responsibilities
 
 
 
 <ul>
 <li>
 Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.
 </li>
 <li>
 Comply with the requirements of RDMC RQHSE Policy and Safety Management System.
 </li>
 <li>
 Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).
 </li>
 <li>
 CISSP, CISM, or CISA certifications are preferred.
 </li>
 <li>
 ISO 27001 Lead Implementer or Lead Auditor is preferred.
 </li>
 <li>
 ITIL Foundation is a plus.
 </li>
 <li>
 Fluent in English and Arabic, French is a plus.
 
 
 </li>
 </ul>
 
 Knowledge
 
 
 
 <ul>
 <li>
 Advanced understanding of network security, cloud security, cryptography, and application security.
 </li>
 <li>
 Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.
 </li>
 <li>
 Proven experience managing SOC operations and security engineering team.
 </li>
 <li>
 Strong track record of cross-functional collaboration and stakeholder engagement.
 
 
 </li>
 </ul>
 
 Desired Behaviors &amp; Experiences
 
 
 
 <ul>
 <li>
 Influence &amp; Engagement: Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.
 </li>
 <li>
 Analytical Thinking: Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.
 </li>
 <li>
 Execution Excellence: Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.
 </li>
 <li>
 Change Agility: Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.
 </li>
 <li>
 Communication: Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.
 </li>
 <li>
 Collaboration: Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.
 </li>
 <li>
 Attention to Detail: Maintains accuracy and consistency in documentation, reporting, and system configurations.
 </li>
 <li>
 Accountability: Demonstrates ownership, responsibility, and reliability in delivering on objectives.
 </li>
 <li>
 Resilience: Remains composed under pressure, solves problems calmly, and stays focused on long-term results.
 </li>
 </ul>
</div>

Cybersecurity Manager

Mashreq

<div>
 
 
 Job Purpose:
 
 
 
 The BISO (Business Information Security Officer) shall act as a conduit between business, technology and information security groups, embedding security into the fabric of Mashreq, fostering a proactive and collaborative approach to managing information security risks across departments.
 
 
 
 
 
 BISO plays a crucial role in
 
 <ul>
 <li>
 promoting a culture of security awareness and compliance within their respective areas.
 </li>
 <li>
 ensuring the security of business operations, information assets, and technology infrastructure at strategic and operational levels.
 </li>
 </ul>
 
 
 
 
 BISO shall enable secure and resilient business digital transformation by partnering with information security group functions, position as a trusted advisor to business leaders, translating security policies and procedures into actionable activities that align with business objectives, and manage residual risks within the approved risk appetite.
 
 
 
 
 
 Key Result Areas:
 
 
 Advocate for Information Security:
 
 <ul>
 <li>
 Serve as advocates for security within, promoting the importance of adhering to security policies, procedures, and best practices.
 </li>
 <li>
 Be a strategic leader developing information security strategies aligned with business goals.
 </li>
 <li>
 Advocate and gain support from key stakeholders across to integrate security as a business enabler.
 </li>
 </ul>
 
 Feedback and Communication:
 
 <ul>
 <li>
 Serve as a liaison between the Information Security team globally and regionally, providing feedback, insights, and concerns from their colleagues to inform security decision-making and initiatives.
 </li>
 <li>
 Act as a trusted advisor to the leadership, providing guidance on information security risks and mitigation strategies.
 </li>
 <li>
 Communicate security risks and solutions effectively to non-technical audiences.
 </li>
 </ul>
 
 Training and Awareness:
 
 <ul>
 <li>
 Partner with unit leaders to embed security awareness into the overall business culture.
 </li>
 <li>
 Help educate colleagues about security risks, threats, and best practices through training sessions, workshops, and regular communications.
 </li>
 <li>
 Collaborate with the Information Security team to develop and implement security awareness campaigns tailored to the specific needs and challenges of business.
 </li>
 </ul>
 
 Policy Compliance:
 
 <ul>
 <li>
 Ensure that activities and processes comply with the organization's information security policies, standards, and guidelines, as well as regulatory requirements across all location where Mashreq is present and industry specific requirements such as PCI-DSS or SWIFT CSP.
 </li>
 </ul>
 
 Risk Identification and Reporting:
 
 <ul>
 <li>
 Identify and report security risks, vulnerabilities, incidents, and concerns to the appropriate channels, such as the Information Security team or management.
 </li>
 </ul>
 
 Security Incident management:
 
 <ul>
 <li>
 Coordinate with the Information Security team during security incidents impactingto provide relevant information, support, and assistance as needed.
 </li>
 <li>
 Assist in incident response efforts within, such as facilitating communication with the Information Security team, documenting incidents, and implementing remediation measures.
 </li>
 </ul>
 
 Security Controls Implementation:
 
 <ul>
 <li>
 Assist in the implementation and maintenance of security controls and measures within, such as access controls, encryption, and monitoring tools.
 </li>
 <li>
 Oversee the application of security measures to ensure comprehensive protection of software and IT infrastructure
 </li>
 </ul>
 
 User Access Management:
 
 <ul>
 <li>
 Actively support the development of a role-based access control model with the bank&rsquo;s IAM teams
 </li>
 <li>
 Help to manage user access and permissions, ensuring that access rights are granted appropriately and revoked when no longer needed.
 </li>
 </ul>
 
 Vendor and Third-Party Risk Management:
 
 <ul>
 <li>
 Assist in evaluating the security posture of vendors and third-party service providers that interact and ensure that appropriate security measures are in place.
 </li>
 </ul>
 
 Continuous Improvement:
 
 
 Actively participate in security improvement initiatives and providing feedback to enhance security processes, controls, and awareness efforts.
 
 
 
 
 
 
 Operating Environment, Framework and Boundaries, Working Relationships:
 
 
 
 
 
 <ul>
 <li>
 
 Operating environment:
 
 All the locations where itis operational
 </li>
 <li>
 
 Frameworks
 
 : Information security policy manual, regulations, industry best practices and contractual requirements.
 </li>
 <li>
 
 Working Relationship
 
 : All Business, Governance, Enabling and Control groups.
 </li>
 </ul>
 
 
 
 
 
 Problem Solving:
 
 
 
 
 
 <ul>
 <li>
 Ability to enable framework, solution, and processes for proactive management of information security risks
 </li>
 <li>
 Ability to understand regulatory language, can take decision on applicability, compensating controls and residual risk.
 </li>
 <li>
 Ability to derive residual risk and control based on defense &ndash; in depth strategy and systemic risk while taking risk and control decisions.
 </li>
 </ul>
 
 
 
 
 
 Decision Making Authority &amp; Responsibility:
 
 
 
 
 
 <ul>
 <li>
 Consult and validate recommendations to mitigate information security risks.
 </li>
 <li>
 Consult and provide recommendations to mitigate the risk to a level aligned with the risk appetite of the bank.
 </li>
 <li>
 Assure compliance to regulatory expectations and avoid regulatory penalty.
 </li>
 <li>
 Confirm adequacy of the controls against internal information security policy, standards and applicable regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Knowledge, Skills, and Experience:
 
 
 
 
 
 
 Essential knowledge
 
 <ul>
 <li>
 Have around 8-10 years of experience in a Banking or highly regulated industry environment, including familiarity with, and over 5-10 years of experience in information security or technology risk management.
 </li>
 <li>
 Extensive knowledge of the Software Development Life Cycle (SDLC), with a focus on integrating security at each phase, from design, development, testing, and deployment.
 </li>
 <li>
 Strong understanding of Computer Science principles and practical expertise in application security
 </li>
 <li>
 Strong understanding of Computer Science principles and practical expertise in application security, secure coding practices (e.g., OWASP Top 10, DevSecOps. etc.)
 </li>
 <li>
 Strong understanding of securing software-defined networks (SDN), software-defined infrastructure (SDI), containerized environments, cloud computing and operating system security.
 </li>
 <li>
 Executive presence, and the ability to foster relationship management, negotiate and influence.
 </li>
 <li>
 Effective communications skills, including both written and verbal communication skills, and the ability to translate security principles into business terms. Familiarity with information security technologies, risk, threat and vulnerability assessments, and security measures.
 </li>
 <li>
 Knowledge of information security regulatory and compliance requirements.
 </li>
 </ul>
 
 Skills and Application
 
 <ul>
 <li>
 Leads the development and implementation of comprehensive information security strategies that address identified risks and compliance requirements inside, in alignment with the Information Security Group.
 </li>
 <li>
 Overseesincident response plan, ensuring it is regularly updated and tested to respond effectively to incidents.
 </li>
 </ul>
 
 Strategic Insight
 
 <ul>
 <li>
 Integrate information security considerations into strategies, recognizing the importance of information security in achieving objectives and competitive advantage.
 </li>
 <li>
 Communicates the strategic value of Data Privacy and Protection investments to executive leadership and key stakeholders, advocating for resources and support to strengthen the organization's capabilities.
 </li>
 <li>
 Cultivates an organizational culture inside that prioritizes and encourages proactive information security practices and continuous improvement across all departments.
 </li>
 </ul>
</div>

Digital Security Manager (BISO) (Mashreq Global Network Egypt)

Thndr

<div>
 
 About The Role
 
 
 
 Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
 
 
 Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:
 
 
 <ul>
 <li>
 Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.
 </li>
 <li>
 Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.
 
 
 </li>
 </ul>
 This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.
 
 
 
 What You'll Do
 
 
 
 
 Security Strategy &amp; Program Ownership
 
 
 
 <ul>
 <li>
 Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.
 </li>
 <li>
 Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.
 </li>
 <li>
 Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.
 
 
 </li>
 </ul>
 
 Governance, Risk &amp; Compliance
 
 
 
 <ul>
 <li>
 Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.
 </li>
 <li>
 Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.
 </li>
 <li>
 Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.
 </li>
 <li>
 Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.
 
 
 </li>
 </ul>
 
 Security Engineering &amp; Technical Oversight
 
 
 
 <ul>
 <li>
 Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.
 </li>
 <li>
 Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.
 </li>
 <li>
 Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.
 </li>
 <li>
 Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.
 
 
 </li>
 </ul>
 
 Team &amp; Function Leadership
 
 
 
 <ul>
 <li>
 Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.
 </li>
 <li>
 Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.
 </li>
 <li>
 Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 
 What You'll Need
 
 
 
 <ul>
 <li>
 8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.
 </li>
 <li>
 Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.
 </li>
 <li>
 Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.
 </li>
 <li>
 Demonstrated ability to build and scale security programs in high-growth environments.
 
 
 </li>
 </ul>
 
 Domain Knowledge
 
 
 
 <ul>
 <li>
 Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.
 </li>
 <li>
 Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.
 
 
 </li>
 </ul>
 
 Frameworks &amp; Compliance
 
 
 
 <ul>
 <li>
 Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.
 </li>
 <li>
 Experience managing regulatory relationships and preparing board- and committee-level security reporting.
 
 
 </li>
 </ul>
 
 Leadership &amp; Communication
 
 
 
 <ul>
 <li>
 Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.
 </li>
 <li>
 A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.
 </li>
 <li>
 Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.
 </li>
 <li>
 Relevant certifications: CISSP, CISM, or equivalent.
 
 
 </li>
 </ul>
 
 Who Are We?
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 5.5 million app downloads
 </li>
 <li>
 EGP 1B+ average daily traded value across 2025
 </li>
 <li>
 #1 digital investing platform in Egypt for the third consecutive year
 </li>
 <li>
 76% of users are first-time investors
 </li>
 <li>
 40% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Head Of Information Security

onebank

<div>
 
 
 Who we are?
 
 
 
 - onebank was established in 2020 as the company responsible for launching the 1st digital native bank in Egypt. The digital bank aims to create innovative solutions tailored to serve the needs of the banking customers in Egypt.
 
 
 -Our main goal is to create a positive customer experience through the differentiated journey that our customers live while using the digital bank.
 
 
 -Our Drive: We use our drive and commitment to energies, engage and inspire others, upholding the highest standards of work ethic, honesty and morality.
 
 
 
 
 
 
 JOB PURPOSE
 
 
 
 
 
 <ul>
 <li>
 Identify, assess, and mitigate IT-related risks impacting Bank operations, security, and compliance. Ensure potential threats to the Bank's technology infrastructure are proactively managed.
 </li>
 <li>
 Safeguard IT systems to protect financial assets, customer trust, and regulatory compliance.
 </li>
 <li>
 Contribute to Bank resilience, long-term growth, and operational integrity.
 </li>
 </ul>
 
 
 
 
 
 MINIMUM QUALIFICATIONS/EDUCATION/EXPERIENCE
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in information technology, Computer Science, Risk Management, or a related field
 </li>
 <li>
 Professional certifications such as CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), or CISSP (Certified Information Systems Security Professional).
 </li>
 </ul>
 
 Skills:
 
 <ul>
 <li>
 Strong analytical, problem-solving, and decision-making abilities.
 </li>
 <li>
 Proficient in risk management tools and methodologies, with excellent communication and stakeholder management skills.
 </li>
 <li>
 7- 10 years of experience in IT fields, IT risk management, Cybersecurity, Information security, and IT Audit.
 </li>
 <li>
 Proven leadership experience in managing IT risk, compliance, and governance frameworks.
 </li>
 <li>
 Extensive knowledge of risk management standards (e.g., ISO 27001, NIST) and regulatory requirements within the banking or financial services industry.
 </li>
 </ul>
 
 
 
 
 
 Job Duties &amp; Responsibilities
 
 
 
 
 
 
 1. Support the implementation and maintenance of the IT Risk Management framework to ensure technology risks are consistently identified, assessed, and monitored, by aligning with the bank&rsquo;s risk appetite, policies, and regulatory requirements.
 
 
 2. Perform comprehensive IT risk assessments /RCSAs across infrastructure, applications, and technology processes to identify control gaps and residual risks, ensuring appropriate mitigation actions are defined and tracked in coordination with IT , Information Security and cybersecurity teams.
 
 
 3. Monitor and analyze Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) related to IT risks in order to detect emerging issues and control weaknesses, by leveraging risk dashboards and reporting tools.
 
 
 4. Review IT policies, procedures, and standards from a risk perspective to ensure alignment with regulatory requirements and internal governance expectations, by coordinating with relevant stakeholders and control owners.
 
 
 5. Track remediation plans and risk treatment actions to ensure timely closure of identified gaps and issues, by following up with responsible teams and escalating overdue or high-risk matters when necessary.
 
 
 6. Assess IT-related incidents, problems, and changes from a risk perspective to evaluate root causes, control effectiveness, and potential systemic risks, ensuring lessons learned are incorporated into the risk framework.
 
 
 7. Support internal and external audit engagements by providing risk-related documentation, evidence, and clarification, ensuring transparency and alignment with audit expectations.
 
 
 8. Promote IT risk awareness across technology and business teams by providing guidance on risk identification, control design, and risk ownership, fostering a strong risk culture within the organization.
 
 
 9. Prepare periodic IT risk reports and dashboards to provide management with clear visibility over the risk posture, key exposures, and mitigation progress, enabling informed decision-making.
 
</div>

IT Risk Assistant Manager

Orange Business

<div>
 
 About Us
 
 
 
 Join us at Orange Business!
 
 
 We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.
 
 
 Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.
 
 
 
 Role Overview
 
 
 
 
 About the role
 
 
 
 As a key contributor to the security of our information security management system, you will serve as the overall guarantor for the security of our cloud administration infrastructure. Joining the security office, you will assume the responsibilities of a delegated Chief Information Security Officer (CISO) for your designated area, operating under the Business Security Officer service. In this role, you will vigilantly monitor for threats affecting your area of responsibility, and your expertise will be validated by industry-recognized certifications.
 
 
 
 Key Responsibilities
 
 
 
 At the intersection of critical cloud success factors - security and reliability, the Business Security Officer engages in a wide array of activities, requiring strong analytical and adaptable skills. Your mission encompasses a diverse set of tasks; expertise in all fields is not mandatory for application.
 
 
 <ul>
 <li>
 Conduct expert assessments and consultancy, including risk analysis, penetration testing, and vulnerability audits.
 </li>
 <li>
 Ensure that Orange designs and operates services in line with management&rsquo;s security requirements, acting as an expert security advisor to operational teams.
 </li>
 <li>
 Develop and implement necessary documentation and controls to maintain security standards.
 </li>
 <li>
 Report regularly on the service&rsquo;s security status.
 </li>
 <li>
 Coordinate the management of security incidents.
 </li>
 <li>
 Raise awareness and reinforce safety rules among operational staff.
 </li>
 <li>
 Contribute to the continuous improvement of Orange security practices, collaborating with peers in a Plan-Do-Check-Act framework.
 
 
 </li>
 </ul>
 
 Specific Activities
 
 
 
 <ul>
 <li>
 Perform risk and vulnerability analyses, create security assurance plans, and monitor relevant indicators.
 </li>
 <li>
 Follow up on external audits and implement security control points.
 </li>
 <li>
 Review security measures with cloud operational teams and conduct awareness sessions for these teams.
 </li>
 <li>
 Analyze security incidents and evaluate architecture or processes to propose improvements.
 </li>
 <li>
 Track action plans resulting from controls and analyses.
 
 
 </li>
 </ul>
 
 About You
 
 
 
 
 Educational Background and Experience
 
 
 
 Candidates should possess a higher degree, typically an engineering or a Master's degree in IT. While this educational foundation is important, having a proven track record with minimum of six years of experience in the cybersecurity field is a significant advantage.
 
 
 
 Core Security Skills And Certifications
 
 
 
 A strong interest in security and additional expertise in the following areas will further strengthen your candidacy:
 
 
 <ul>
 <li>
 Holding certifications such as CISSP, CISM, CISA, or equivalent credentials.
 </li>
 <li>
 Possession of vendor-specific certifications is preferred, including but not limited to Cisco, Fortinet, and Palo Alto.
 </li>
 <li>
 Solid understanding of security frameworks and standards, particularly ISO 27000 series.
 </li>
 <li>
 Comprehensive knowledge of encryption methods and networking protocols.
 </li>
 <li>
 Familiarity with ITIL processes and their application in operational environments.
 
 
 </li>
 </ul>
 
 Interpersonal And Professional Skills
 
 
 
 Proficiency in English is essential for this position. French language skills are a valuable asset. Strong interpersonal abilities are essential for effective collaboration within teams, both with operational staff and management. The ideal candidate demonstrates the following qualities:
 
 
 <ul>
 <li>
 Capability to engage and communicate with customers, adapting to both technical and high-level interactions.
 </li>
 <li>
 Sensitivity to customers&rsquo; corporate cultures and the ability to understand and respect their unique needs and differences.
 </li>
 <li>
 A customer satisfaction-oriented mindset, prioritizing positive outcomes for client engagements.
 </li>
 <li>
 Capacity to work autonomously, demonstrating initiative and independence.
 </li>
 <li>
 Proactive identification of problems and the ability to deliver effective solutions.
 </li>
 <li>
 Skill in creating professional dashboards and documentation that meet or exceed customer expectations.
 </li>
 <li>
 Ability to offer guidance, coordination, and leadership, especially in the context of security crises.
 
 
 </li>
 </ul>
 You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.
 
 
 
 What We Offer
 
 
 
 <ul>
 <li>
 Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.
 </li>
 <li>
 Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working).
 </li>
 <li>
 Professional Development: training programs and upskilling/re-skilling opportunities.
 </li>
 <li>
 Career Growth: Internal growth and mobility opportunities within Orange.
 </li>
 <li>
 Caring and Daring Culture: Health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events.
 </li>
 <li>
 Reward Programs: Employee Referral Program, Change Maker Awards.
 
 
 </li>
 </ul>
 
 Only Your Skills Matter
 
 
 
 Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.
</div>

Business Security Officer

<div>
 
 About The Role
 
 
 
 We are looking for a
 
 Senior Governance, Risk, and Compliance (GRC) professional
 
 to lead and strengthen our compliance and risk management program across multiple frameworks, entities, and geographies. The ideal candidate will have strong hands-on experience with
 
 SOC 2
 
 ,
 
 ISO 27001
 
 ,
 
 PCI DSS
 
 , and modern compliance automation platforms such as
 
 Sprinto
 
 , with the ability to build and operate a
 
 hybrid unified GRC framework
 
 for multi-geographical entities.
 
 
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Lead the design, implementation, and continuous improvement of the organization&rsquo;s Governance, Risk, and Compliance program.
 </li>
 <li>
 Manage compliance initiatives across key frameworks including SOC 2, ISO 27001, PCI DSS, and other applicable standards or regulations.
 </li>
 <li>
 Build and maintain a hybrid unified GRC framework that enables a common control structure across multiple legal entities, business units, and geographical regions.
 </li>
 <li>
 Align global baseline controls with local regulatory, legal, privacy, and operational requirements.
 </li>
 <li>
 Perform risk assessments, compliance gap assessments, control reviews, and remediation tracking.
 </li>
 <li>
 Develop, maintain, and improve policies, standards, procedures, and control documentation.
 </li>
 <li>
 Own audit readiness activities including evidence collection, control walkthroughs, auditor coordination, and remediation follow-up.
 </li>
 <li>
 Drive cross-framework control mapping to reduce duplication and improve audit efficiency across multiple compliance programs.
 </li>
 <li>
 Work closely with Engineering, Information Technology, Security, Legal, Privacy, Human Resources, and business teams to embed compliance requirements into operations.
 </li>
 <li>
 Manage third-party risk assessments, vendor due diligence, and ongoing compliance reviews for critical suppliers.
 </li>
 <li>
 Define and monitor Governance, Risk, and Compliance metrics, compliance status reporting, and executive dashboards.
 </li>
 <li>
 Support security awareness, policy governance, exception management, and ongoing program maturity improvements.
 </li>
 <li>
 Track regulatory and framework changes and assess their impact across all relevant entities and regions.
 
 
 </li>
 </ul>
 
 What You'll Need
 
 
 
 <ul>
 <li>
 5+ years of experience in Governance, Risk, and Compliance, Information Security, Audit, or a related field.
 </li>
 <li>
 Strong practical experience with SOC 2, ISO 27001, and PCI DSS including implementation, control mapping, readiness assessments, evidence collection, and audit support.
 </li>
 <li>
 Proven experience working with compliance automation / GRC platforms such as Sprinto, Drata, Vanta, or similar tools.
 </li>
 <li>
 Experience building or managing a unified control framework that maps multiple standards into a centralized and scalable compliance model.
 </li>
 <li>
 Experience supporting multi-entity and multi-geographical compliance programs with both centralized governance and localized compliance requirements.
 </li>
 <li>
 Strong understanding of risk management, control design, issue tracking, remediation planning, and compliance operations.
 </li>
 <li>
 Experience writing and maintaining policies, standards, procedures, and governance documentation.
 </li>
 <li>
 Good understanding of third-party risk management, supplier due diligence, and control assurance processes.
 </li>
 <li>
 Strong knowledge of core security and compliance domains such as access control, asset management, vulnerability management, incident management, change management, and business continuity.
 </li>
 <li>
 Experience working with auditors, control owners, leadership teams, and cross-functional stakeholders.
 </li>
 <li>
 Strong communication, organization, and documentation skills.
 </li>
 <li>
 Experience in regulated industries such as fintech, payments, healthcare, Software as a Service, or cloud environments.
 </li>
 <li>
 Familiarity with cloud compliance and shared responsibility models across Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
 </li>
 <li>
 Relevant certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, Certified Information Systems Security Professional, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or PCI Professional is a plus.
 
 
 </li>
 </ul>
 
 Who Are We?
 
 
 
 Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
 
 
 History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:
 
 
 <ul>
 <li>
 High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.
 </li>
 <li>
 Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.
 </li>
 <li>
 Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.
 
 
 </li>
 </ul>
 We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:
 
 
 <ul>
 <li>
 3 million app downloads
 </li>
 <li>
 $8.8bn in annualized traded value
 </li>
 <li>
 #1 platform in terms of traded value
 </li>
 <li>
 84% of our users are investing for the first time
 </li>
 <li>
 65% of our users come from outside of capital cities and have previously had limited access to financial institutions
 
 
 </li>
 </ul>
 Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
 
 
 
 Rumble
 
 was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
 
 
 Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
 
 
 At
 
 Thndr
 
 , we're looking for people driven by our mission to help us democratize investing across the MENA region.
 
 
</div>

Senior GRC Security Engineer

Arrow Components

<div>
 
 Position
 
 
 
 Senior Adobe Experience Manager (AEM) Developer / Architect
 
 
 
 Job Description
 
 
 
 Job Description
 
 
 This role is responsible for
 
 designing, building, and optimizing Adobe Experience Manager (AEM) solutions
 
 to power
 
 Arrow Digital&rsquo;s
 
 customer-focused digital experience. The ideal candidate has extensive experience in AEM architecture, component development, and cloud-based optimizations, with a deep understanding of best practices for security, performance, and scalability. This candidate should be experienced
 
 AEM Headless Architect
 
 with deep expertise in
 
 React-based front-end architectures
 
 ,
 
 Server-Side Rendering (SSR)
 
 , and
 
 API-driven integrations
 
 using
 
 Adobe Experience Manager (AEM)
 
 as a
 
 pure headless CMS.
 
 
 
 
 Essential Duties And Responsibilities
 
 
 
 <ul>
 <li>
 Architect end-to-end headless solutions using AEM as a content source and React/Next.js for rendering.
 </li>
 <li>
 Design SSR and SSG architectures leveraging Next.js or similar frameworks for high-performance and SEO-friendly sites.
 </li>
 <li>
 Define and implement AEM Headless content models (Content Fragments, Models, and APIs) that support omnichannel delivery.
 </li>
 <li>
 Architect, develop, and maintain scalable AEM components following Adobe best practices and focusing on reusability.
 </li>
 <li>
 Lead AEM template, workflow, and dispatcher configurations, ensuring high availability and performance.
 </li>
 <li>
 Guide AEM Cloud implementations, ensuring alignment with Adobe&rsquo;s evolving cloud-native capabilities.
 </li>
 <li>
 Collaborate with system administrators, DevOps, and security teams on deployments, optimizations, and system upgrades.
 </li>
 <li>
 Serve as a technical leader, providing mentorship to developers and ensuring adherence to AEM development standards.
 </li>
 <li>
 Troubleshoot complex authoring, performance, and integration issues across the AEM platform.
 </li>
 <li>
 Oversee and optimize AEM integrations with Adobe CJA Analytics, Adobe Launch, and third-party services.
 </li>
 <li>
 Define and enforce security, accessibility, SEO, UX, and analytics best practices.
 </li>
 <li>
 Lead code reviews, technical design sessions, and solution architecture discussions.
 </li>
 <li>
 Maintain and evolve comprehensive technical documentation.
 </li>
 <li>
 Collaborate with stakeholders and product teams, aligning AEM capabilities with business goals.
 </li>
 <li>
 Provide leadership in Agile/Scrum environments, ensuring efficient sprint planning and execution.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Significant hands-on experience with Adobe Experience Manager (AEM 6.x / AEM as a Cloud Service), including Sites, Assets (and optionally Forms).
 </li>
 <li>
 Strong Java / Java EE / OSGi / Apache Sling / HTL (Sightly) experience.
 </li>
 <li>
 Experience with building AEM components, templates, dialogs, services, workflows, scheduled jobs.
 </li>
 <li>
 Familiarity with front-end technologies: HTML5, CSS3/SCSS, JavaScript, client libraries, responsive design.
 </li>
 <li>
 Experience in integrating AEM with other systems: REST APIs / SOAP, CRM, marketing tools, identity management / SSO.
 </li>
 <li>
 Strong understanding of caching, dispatching, CDN, load balancing, performance tuning.
 </li>
 <li>
 Experience in upgrades / migrations of AEM or content migration (from legacy systems).
 </li>
 <li>
 Strong design/architectural mindset: able to make high-level design decisions, tradeoffs, and document them.
 </li>
 <li>
 Good leadership, communication (both technical &amp; non-technical), and team mentoring skills.
 </li>
 <li>
 Familiarity with DevOps / CI-CD pipelines, environment provisioning, monitoring, logging.
 </li>
 <li>
 Knowledge of security best practices (authentication, authorization, vulnerabilities).
 </li>
 <li>
 Experience in multi-site / multi-language (MSM), headless architecture, GraphQL / SPA front ends.
 
 
 </li>
 </ul>
 
 Education / Certifications
 
 
 
 <ul>
 <li>
 Bachelor's or master's degree in computer science, Information Technology, Engineering, or related field (or equivalent experience).
 </li>
 <li>
 Preferably AEM Architect or AEM Developer certification(s) from Adobe.
 </li>
 <li>
 Relevant certifications (e.g., cloud / security) are a plus.
 
 
 </li>
 </ul>
 
 Nice-to-Have / Additional (Optional)
 
 
 
 <ul>
 <li>
 Experience working in eCommerce platforms and integrations.
 </li>
 <li>
 Experience with Adobe Experience Cloud stack: Analytics, Target, Campaign, Launch, etc.
 </li>
 <li>
 Experience with micro-frontends or component-based architecture.
 </li>
 <li>
 Experience in large scale, globally distributed environments.
 </li>
 <li>
 Knowledge of modern front-end frameworks (React, Angular, Vue) especially in hybrid or headless AEM setups.
 </li>
 <li>
 Experience with AEMaaCS or AMS (Adobe Managed Services).
 
 
 </li>
 </ul>
 
 Location:
 
 
 
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 
 
 
 Time Type
 
 
 
 Full time
 
 
 
 Job Category
 
 
 
 Information Technology
</div>

Senior Adobe Experience Manager (AEM) Developer / Architect

Explore 609+ Information security manager in Cairo this May. Find roles across top companies and apply now to boost your career.