information security risk manager

Systems Limited

<div>
 
 The
 
 Information Security Risk Management &amp; Reporting Manager
 
 supports the development and execution of the bank&rsquo;s information security risk management strategy. The role ensures cyber and information security risks are effectively identified, assessed, monitored, and reported in alignment with enterprise risk frameworks and business objectives. The position also drives automation and optimization of security risk processes through Governance, Risk, and Compliance (GRC) platforms, enabling centralized risk visibility, streamlined reporting, and stronger governance across the organization.
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Define and manage the
 
 information security risk lifecycle
 
 in alignment with Enterprise Risk Management (ERM) and Operational Risk Management (ORM) frameworks.
 </li>
 <li>
 Support business and technology teams in
 
 risk-based decision making
 
 related to cyber and information security.
 </li>
 <li>
 Develop and implement
 
 risk appetite and risk management frameworks
 
 in collaboration with ERM and ORM teams.
 </li>
 <li>
 Ensure
 
 information security exceptions
 
 are documented, assessed, approved by risk owners, and tracked until closure.
 </li>
 <li>
 Identify, assess, and monitor
 
 cyber risks
 
 , ensuring effective documentation, reporting, and remediation tracking.
 </li>
 <li>
 Conduct
 
 cyber risk quantification
 
 to evaluate potential business impact using qualitative or quantitative methods.
 </li>
 <li>
 Develop and maintain a
 
 centralized cyber risk register
 
 to track risk status, remediation progress, and emerging threats.
 </li>
 <li>
 Promote adoption of
 
 cybersecurity best practices
 
 across teams and business units.
 </li>
 <li>
 Act as the
 
 business owner of the Information Security GRC platform
 
 , ensuring its effective use for governance, risk, and compliance activities.
 </li>
 <li>
 Enable
 
 automation of information security processes
 
 through GRC solutions, including dashboards, risk registers, and reporting capabilities.
 </li>
 <li>
 Manage relationships with
 
 GRC solution vendors
 
 , including requirements, licensing, contracts, and renewals.
 </li>
 <li>
 Ensure GRC tools are
 
 configured and integrated
 
 to meet the organization&rsquo;s risk, compliance, and audit requirements.
 </li>
 <li>
 Monitor
 
 GRC platform performance
 
 , resolve issues, and ensure continuous system availability and usability.
 </li>
 <li>
 Develop
 
 training and guidance
 
 to support GRC platform adoption across the organization.
 </li>
 <li>
 Support
 
 CISOs and information security teams
 
 in regulatory audits, assessments, and reporting.
 </li>
 <li>
 Manage
 
 GRC Run-the-Bank and Change-the-Bank initiatives
 
 , ensuring timely delivery and proactive risk escalation.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 
 10+ years of experience
 
 in Information Security or Cyber Security, including
 
 2&ndash;3 years managing GRC platforms or similar governance roles
 
 .
 </li>
 <li>
 Strong experience in
 
 information security governance, risk management, compliance, and cyber risk frameworks
 
 .
 </li>
 <li>
 Hands-on experience with
 
 GRC platforms
 
 such as RSA Archer, MetricStream, or similar solutions.
 </li>
 <li>
 Strong understanding of
 
 banking security frameworks and standards
 
 such as ISO 27001, NIST 800 series, PCI-DSS, SWIFT CSP, and COBIT.
 </li>
 <li>
 Experience in
 
 risk assessments, cyber risk quantification, and risk reporting
 
 in enterprise environments.
 </li>
 <li>
 Ability to interpret
 
 regulatory requirements
 
 and translate them into security controls and risk mitigation strategies.
 </li>
 <li>
 Strong
 
 analytical, stakeholder management, and communication skills
 
 , with experience working with senior leadership.
 </li>
 <li>
 Experience managing
 
 enterprise security initiatives and cross-functional projects
 
 .
 </li>
 <li>
 
 Master&rsquo;s degree
 
 in Information Technology, Information Security, or a related field.
 </li>
 <li>
 Professional certifications such as
 
 CISA, CISM, CISSP, CRISC, or ISO 27001 LA/LI
 
 preferred.
 </li>
 </ul>
 
 
</div>

Information Security Risk & Reporting Manager

Mobilink Bank

<div>
 
 
 Job Title:
 
 Assistant Manager IS GRC
 
 
 
 Department:
 
 Information Security
 
 
 
 Grade:
 
 OG-I
 
 
 
 Reports to:
 
 Manager GRC
 
 
 
 
 
 
 About the Role:
 
 
 
 The role is responsible for supporting the organization&rsquo;s Information Security Governance, Risk, and Compliance (GRC) function to ensure compliance with regulatory, contractual, and internal security requirements.
 
 
 
 
 
 
 Job Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Support implementation, maintenance, and continuous improvement of the
 
 Information Security Management System (ISMS)
 
 in line with
 
 ISO/IEC 27001
 
 requirements.
 </li>
 <li>
 Assist in
 
 risk assessments
 
 , risk treatment plans, and maintenance of the
 
 Information Security Risk Register
 
 .
 </li>
 <li>
 Support compliance with
 
 State Bank of Pakistan (SBP)
 
 Cyber Security Framework, policies, and regulatory directives.
 </li>
 <li>
 Assist in
 
 PCI DSS
 
 , SOX, ITGC and other regulatory or audit-related activities, including evidence collection and tracking of remediation actions.
 </li>
 <li>
 Coordinate internal and external
 
 security audits
 
 , regulatory inspections, and management reviews.
 </li>
 <li>
 Support
 
 third-party / vendor risk management
 
 , including security due diligence, risk assessments, and onboarding/offboarding reviews.
 </li>
 <li>
 Assist in reviewing and updating
 
 information security policies, standards, procedures, and SOPs
 
 .
 </li>
 <li>
 Participate in
 
 security awareness and phishing simulation programs
 
 , including reporting and metrics.
 </li>
 <li>
 Maintain compliance documentation, dashboards, KPIs, KRIs, and management reporting.
 </li>
 <li>
 Coordinate with IT, SOC, application teams, and business units on GRC-related requirements and observations.
 </li>
 <li>
 Perform any other GRC-related tasks assigned by the Manager GRC.
 </li>
 </ul>
 
 
 
 
 
 Job Requirements:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, IT, or a related discipline with 5+ years of relevant cybersecurity governance experience, preferably in a banking industry.
 </li>
 <li>
 Exposure to regulatory audits, ISO 27001, SBP requirements, or PCI DSS is highly desirable.
 </li>
 <li>
 Relevant certifications ISO 27001 (LI/LA), CISA are preferred.
 </li>
 <li>
 Proven knowledge of SBP cybersecurity regulations, guidelines, and compliance requirements.
 </li>
 <li>
 Ability to manage and track cybersecurity action plans, risk registers, and remediation activities.
 </li>
 <li>
 Strong analytical, documentation, and communication skills to engage with technical teams, auditors, and senior management.
 </li>
 <li>
 Ability to work independently on critical and time-sensitive tasks based on management direction.
 </li>
 <li>
 Statements in this document are intended to reflect, in general, the role and responsibilities of the position, but are not to be interpreted as totally inclusive.
 </li>
 </ul>
 
 
 
 
 
 About MMBL:
 
 
 
 
 
 
 Mobilink Microfinance Bank Ltd. is providing banking services to over 48 million registered users including 20+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 114 branches and 270,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan instalments), mobile wallets, insurance, G2P, B2B &amp; B2P payments; thus, playing a leading role in the promotion of financial inclusion. MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
 
 
 
 
 
 
 Why Join MMBL?
 
 
 
 
 
 
 This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.
 
 
 
</div>

Assistant Manager IS GRC

Concentrix

<div>
 
 Job Title
 
 
 
 Specialist I, Governance, Risk and Compliance
 
 
 We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
 
 
 The global technology and services leader that powers the world&rsquo;s best brands, today and into the future. We&rsquo;re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we&rsquo;re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
 
 
 In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today&rsquo;s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.
 
 
 Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we&rsquo;re proud to be recognized with awards such as "World's Best Workplaces," &ldquo;Best Companies for Career Growth,&rdquo; and &ldquo;Best Company Culture,&rdquo; year after year.
 
 
 We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.
 
 
 Join us and be part of this journey towards greater opportunities and brighter futures.
 
 
 
 Role Description
 
 
 
 We are seeking a professional with
 
 3&ndash;5 years of experience
 
 in Information Security Risk Management to support global business operations and third-party engagements. This role involves driving risk management activities, conducting assessments, supporting audits, and ensuring compliance with contractual, regulatory, and company standards.
 
 
 The ideal candidate will balance technical expertise with business acumen, think creatively to solve problems, and build strong relationships across teams while maintaining a proactive, &ldquo;ready-to-act&rdquo; attitude.
 
 
 <ul>
 <li>
 Responsibilities:
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead and manage Information Security Risk Management activities across internal business units and third parties.
 </li>
 <li>
 Maintain and continuously improve Concentrix&rsquo;s risk management frameworks.
 </li>
 <li>
 Conduct and support risk assessments for business teams and external partners.
 </li>
 <li>
 Deliver training and awareness programs on risk management practices.
 </li>
 <li>
 Interpret contractual and regulatory requirements to align with risk management strategies.
 </li>
 <li>
 Develop and maintain documentation, policies, and procedures related to risk management.
 </li>
 <li>
 Support and manage both internal and external risks.
 </li>
 <li>
 Respond to client audits, reviews, and assessments with timely and structured methodologies.
 </li>
 <li>
 Communicate risks, vulnerabilities, and findings effectively to senior management and stakeholders, ensuring closure and governance of identified issues.
 </li>
 <li>
 Complete all assigned, mandatory training within the timeframe provided
 </li>
 <li>
 Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports
 
 
 </li>
 </ul>
 
 Accountability
 
 
 
 <ul>
 <li>
 Drive risk management activities at the location level and across global engagements.
 </li>
 <li>
 Ensure frameworks and processes remain aligned with business, regulatory, and contractual obligations.
 </li>
 <li>
 Act as a key liaison between business teams, support teams, and external stakeholders during audits and assessments.
 </li>
 <li>
 Provide clear reporting and tactical influence to leadership regarding risk exposure and mitigation.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Education: Bachelor&rsquo;s degree (preferred, ideally in Computer Science, Information Security, Risk Management, or related field).
 </li>
 <li>
 Experience: 3&ndash;5 years of hands-on experience in security, privacy, and compliance risk management.
 </li>
 <li>
 Certifications (preferred): CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, or other professional security/privacy credentials.
 
 
 </li>
 </ul>
 
 Candidate Profile
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills with the ability to balance risk vs. business opportunity.
 </li>
 <li>
 Excellent communication and stakeholder management skills.
 </li>
 <li>
 Collaborative team player with a proactive, adaptable mindset.
 </li>
 <li>
 Detail-oriented, organized, and able to manage multiple priorities under pressure.
 </li>
 </ul>
</div>

Specialist I, Governance, Risk and Compliance

Deloitte

<div><div><div>Location
</div>Cairo, Egypt Delivery Center
</div><div><div><div>Risk Officer &ndash; Information Security, Cairo, Egypt
Connect to your career at Deloitte
Deloitte, established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
Connect to your opportunity
Deloitte is seeking a skilled Risk Officer specializing in Information Security to support the Risk Leader in developing, maintaining, and enhancing the organization&rsquo;s risk management framework, with a focus on information security risks. The Risk Officer will play a vital role in identifying, assessing, and mitigating risks to safeguard DIH&rsquo;s information assets and ensure compliance with relevant security standards.
Key Responsibilities<ul>
<li>Maintain and update risk management documentation related to information security, ensuring accuracy and relevance.
</li><li>Conduct regular risk assessments to identify threats and vulnerabilities affecting DIH, supporting risk owners in managing the Business Priority Risk Register.
</li><li>Review compliance with information security policies such as data classification and clear desk policies, identifying gaps and recommending corrective actions.
</li><li>Deliver training and awareness programs to staff to promote a strong risk-aware culture, and support ongoing communication through newsletters and other channels.
</li><li>Monitor and report on the performance of the information security risk management framework against established KPIs, providing updates to the Risk Leader.
</li><li>Facilitate management reviews of information security risks and controls.
</li><li>Coordinate vulnerability assessments and penetration testing activities, ensuring findings are tracked and remediated.
</li><li>Act as a key contact for security incident response planning and execution, supporting investigations and recommending corrective measures as needed.</li>
</ul>Connect to your skills and professional experience
Skills and Competencies<ul>
<li>Business Acumen: Ability to translate technical security risks into business impact and communicate effectively with both technical and non-technical stakeholders.
</li><li>Communication: Skilled in presenting risk assessments and control effectiveness clearly and persuasively.
</li><li>Relationship Management: Proven ability to build collaborative relationships with business leaders, IT and other teams, and external partners.
</li><li>Conflict Management: Experience in recognising and managing conflicts related to risk and security issues.
</li><li>Interpersonal Skills: Strong ability to work constructively with diverse teams to foster a risk-aware culture.</li>
</ul>Qualifications &amp; Experience<ul>
<li>Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or a related discipline.
</li><li>7+ years&rsquo; experience in information security, risk management, or related fields.
</li><li>Experience managing information security and privacy risks within large organisations.
</li><li>Relevant certifications such as Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP) are required.
</li><li>ISO 27001 Lead Implementer and/or ISO 27701 Lead Implementer certification is highly desirable.</li>
</ul>Connect to your team &ndash; Technology &amp; Transformation
Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
Personal independence
Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your &quot;Immediate Family Members&quot; are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
Connect to your Industry
&ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
Our commitment to you
Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
Connect to your next step
A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.</div></div></div></div>

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt

<div>
 
 Risk Officer &ndash; Information Security
 
 
 , Cairo, Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity
 
 
 
 Deloitte is seeking a skilled Risk Officer specializing in Information Security to support the Risk Leader in developing, maintaining, and enhancing the organization&rsquo;s risk management framework, with a focus on information security risks. The Risk Officer will play a vital role in identifying, assessing, and mitigating risks to safeguard DIH&rsquo;s information assets and ensure compliance with relevant security standards.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Maintain and update risk management documentation related to information security, ensuring accuracy and relevance.
 </li>
 <li>
 Conduct regular risk assessments to identify threats and vulnerabilities affecting DIH, supporting risk owners in managing the Business Priority Risk Register.
 </li>
 <li>
 Review compliance with information security policies such as data classification and clear desk policies, identifying gaps and recommending corrective actions.
 </li>
 <li>
 Deliver training and awareness programs to staff to promote a strong risk-aware culture, and support ongoing communication through newsletters and other channels.
 </li>
 <li>
 Monitor and report on the performance of the information security risk management framework against established KPIs, providing updates to the Risk Leader.
 </li>
 <li>
 Facilitate management reviews of information security risks and controls.
 </li>
 <li>
 Coordinate vulnerability assessments and penetration testing activities, ensuring findings are tracked and remediated.
 </li>
 <li>
 Act as a key contact for security incident response planning and execution, supporting investigations and recommending corrective measures as needed.
 
 
 </li>
 </ul>
 
 Skills And Competencies
 
 
 
 
 Connect to your skills and professional experience
 
 
 
 <ul>
 <li>
 Business Acumen: Ability to translate technical security risks into business impact and communicate effectively with both technical and non-technical stakeholders.
 </li>
 <li>
 Communication: Skilled in presenting risk assessments and control effectiveness clearly and persuasively.
 </li>
 <li>
 Relationship Management: Proven ability to build collaborative relationships with business leaders, IT and other teams, and external partners.
 </li>
 <li>
 Conflict Management: Experience in recognising and managing conflicts related to risk and security issues.
 </li>
 <li>
 Interpersonal Skills: Strong ability to work constructively with diverse teams to foster a risk-aware culture.
 
 
 </li>
 </ul>
 
 Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or a related discipline.
 </li>
 <li>
 7+ years&rsquo; experience in information security, risk management, or related fields.
 </li>
 <li>
 Experience managing information security and privacy risks within large organisations.
 </li>
 <li>
 Relevant certifications such as Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP) are required.
 </li>
 <li>
 ISO 27001 Lead Implementer and/or ISO 27701 Lead Implementer certification is highly desirable.
 
 
 </li>
 </ul>
 
 Connect to your team &ndash; Technology &amp; Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>

<div>
 
 The ideal candidate for this role will support the global Information Security function and assist the Global CISO in delivering cybersecurity risk management aligned with the organization&rsquo;s business strategy.
 
 
 
 
 
 
 Location:
 
 Karachi, Lahore, Islamabad, Multan, Faislabad.
 
 
 
 
 
 
 Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Conduct information security risk assessments and related analysis across systems, projects, and third-party engagements.
 </li>
 <li>
 Maintain and update the Information Security Risk Register, ensuring risks are accurately documented and tracked.
 </li>
 <li>
 Monitor and report Key Risk Indicators (KRIs), ensuring timely escalation when thresholds are exceeded.
 </li>
 <li>
 Support the management of exceptions to Information Security policies, including assessment, documentation, and tracking.
 </li>
 <li>
 Assist in managing the cybersecurity risk lifecycle, from identification and assessment to mitigation and reporting.
 </li>
 <li>
 Provide risk reporting and insights to stakeholders and senior security leadership.
 </li>
 <li>
 Ensure security risk practices align with regulatory requirements, security frameworks, and internal risk appetite.
 </li>
 <li>
 Work closely with security teams, business units, and technology teams to promote risk awareness and improve risk management processes.
 </li>
 </ul>
 
 
 
 
 
 Requirements:
 
 
 
 
 
 <ul>
 <li>
 3&ndash;5 years of experience in Information Security, Cyber Risk, or IT Risk Management.
 </li>
 <li>
 Experience conducting information security risk assessments and maintaining risk registers.
 </li>
 <li>
 Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST, or similar.
 </li>
 <li>
 Understanding of cybersecurity risk lifecycle, governance, and compliance practices.
 </li>
 <li>
 Strong analytical, documentation, and reporting skills.
 </li>
 <li>
 Ability to communicate risk concepts clearly to technical and non-technical stakeholders.
 </li>
 <li>
 Relevant certifications such as CISM, CRISC, CISSP, or ISO 27001 are a plus.
 </li>
 </ul>
 
 
</div>

IT Risk Analyst

Chalhoub Group

<div>INSPIRE | EXHILARATE | DELIGHT
For over seven decades, Chalhoub Group has been a partner and creator of luxury experiences in the Middle East. In its pursuit to excel as a hybrid luxury retailer, the Group has curated a portfolio of over 10 owned brands and strengthened its distribution and marketing expertise for over 400 international names across luxury fashion, beauty, jewellery, watches, eyewear, and art de vivre categories.
Every step at Chalhoub Group is taken to build a future where luxury dreams become reality &mdash; bridging cultures and crafting memorable experiences for our consumers. Be it by constantly reinventing itself, committing to innovation, or embracing new technologies, the Group is shaping the future of luxury retail. It delivers seamless omnichannel experiences across more than 950 stores, online platforms, and mobile apps. Driving this innovation journey is The Greenhouse &mdash; the Group&rsquo;s innovation hub, incubator, and accelerator for startups and emerging businesses, regionally and globally.
Chalhoub Group fosters a people-at-heart culture rooted in diversity, equity, and inclusion, and a workplace catalysed by forward thinking and future-proofing. Today, it brings together over 16,000 talented professionals across eight countries in the Middle East, with a presence in LATAM. Their collective efforts have earned the Group the Great Place to Work certification in several markets.
Sustainability is at the core of the Group&rsquo;s strategy, guided by a clear commitment to people, partners, and the planet. Chalhoub Group is proud to be a member of the United Nations Global Compact, a signatory of the Women&rsquo;s Empowerment Principles, and to have pledged to reach Net Zero by 2040. 
What You'll Be Doing
The Director of Information Security - GRC is a senior leadership role responsible for governing and institutionalizing cybersecurity risk, regulatory compliance, and control frameworks across Chalhoub Group&rsquo;s global operations. This role leads the design, implementation, and continuous enhancement of enterprise-wide GRC programs, enabling risk-informed decision-making, regulatory confidence, and security accountability across all business units.
As a key member of the Group&rsquo;s cybersecurity leadership team, this position partners with Legal, Internal Audit, Data Privacy, Procurement, HR, Retail Operations, and Technology to operationalize trust, embed policies, and ensure adherence to global and regional standards.
Key Responsibilities
GRC Strategy &amp; Operating Model - Design and execute the Group&rsquo;s Information Security GRC strategy, aligned with corporate risk management, technology transformation, and global expansion. Define the operating model, team structure, and KPIs to ensure scalable, repeatable, and effective governance practices.
Governance &amp; Policy Management - Develop, maintain, and socialize Group-wide security policies, standards, and procedures in alignment with ISO 27001, NIST CSF, COBIT, and business objectives. Lead cross-functional governance forums and ensure policy integration with HR, Legal, and IT service management.
Risk Management &amp; Control Frameworks - Own the Information Security Risk Management Framework (ISRMF): including identification, assessment, prioritization, treatment, and monitoring of security risks. Implement risk quantification models and dashboards (e.g., FAIR, GRC platforms). Embed risk management into project governance, third-party onboarding, and change management.
Regulatory Compliance &amp; Audit Readiness - Ensure compliance with global and regional security and privacy regulations including: UAE PDPL, KSA PDPL, EU GDPR, PCI-DSS, ISO 27001/22301. Lead internal and external audits, including Group ISO certification efforts, customer security reviews, and regulatory inspections. Maintain audit evidence repository and collaborate with Internal Audit and Legal for closure of issues and recommendations.
Third-Party Risk Management - Own the end-to-end Third-Party Cybersecurity Risk Management (TPCRM) program. Define onboarding requirements, due diligence controls, contract clauses, and periodic reassessments. Collaborate with Procurement and Legal to ensure security risks are addressed during partner lifecycle.
Awareness &amp; Training - Lead cybersecurity awareness and compliance education programs across the Group, including campaigns, simulated phishing, and executive training. Customize programs for different roles, departments, and markets to increase engagement and accountability.
GRC Technology &amp; Automation - Manage the Group&rsquo;s GRC platform. Integrate GRC systems with ITSM, Risk Registers, and Incident Management platforms. Continuously improve metrics, dashboards, and workflow automation for GRC lifecycle efficiency.
What You&rsquo;ll Need To Succeed
<ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, Information Assurance, Law, Risk Management, or a related field.
</li><li>Relevant certifications strongly preferred: CISM, CRISC, CGEIT, CISSP, ISO 27001 Lead Auditor, ITIL, or equivalent.
</li><li>12+ years of progressive experience in cybersecurity or technology risk, with 5+ years in a senior GRC leadership role in a global enterprise or regional conglomerate.
</li><li>Strong understanding of Middle East regulatory requirements and global data protection laws.
</li><li>Proven track record managing multi-audit environments, cross-border compliance, and stakeholder engagement at C-level.</li></ul>
What We Can Offer You
With us, you will turn your aspirations into reality. We will help shape your journey through enriching experiences, learning and development opportunities and exposure to different assignments within your role or through internal mobility. Our Group offers diverse career paths for those who are extraordinary, every day.
We recognise the value that you bring, and we strive to provide a competitive benefits package which includes health care, child education contribution, remote and flexible working policies as well as exclusive employee discounts.
We Invite All Applicants to Apply
It Takes Diversity Of Thought, Culture, Background, Differing Abilities and Perspectives to truly Inspire, Exhilarate and Delight our customers. At Chalhoub Group, we are committed to inclusion and diversity.
We welcome all applicants to apply and be part of our exciting future. We ensure equal opportunity for all our applicants without regard to gender, age, race, religion, national origin or disability status.</div>

Director of Information Security - GRC (Governance, Risk & Compliance)

Search 10000+ Information security risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information security risk manager jobs Near Me

Information Security Risk & Reporting Manager

Assistant Manager IS GRC

Specialist I, Governance, Risk and Compliance

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt

IT Risk Analyst

Director of Information Security - GRC (Governance, Risk & Compliance)