information technology security manager

Yousuf Adil (Chartered Accountants)

<p><b>Job Summary</b></p><p>Yousuf Adil Chartered Accountants is looking for the position of &ldquo;Manager - Technology &amp; Cyber Risk Advisory&rdquo; within Technology and Cyber Risk Advisory department for its</p><p>Karachi office. The incumbent will be responsible for:</p><p><b>Job Description</b></p><ul><li>Lead end-to-end IT audit and advisory engagements, including planning, execution, reporting, and client communication.</li><li>Assess IT general controls (ITGC), application controls, cybersecurity, cloud environments, and emerging technologies.</li><li>Deliver insights and recommendations to strengthen client risk management and internal controls.</li><li>Support regulatory and compliance projects (e.g., ISO 27001, SOC 1/2, NIST, COBIT, etc.).</li><li>Develop and maintain strong client relationships and contribute to business development.</li><li>Manage and coach junior team members, promoting a culture of excellence and collaboration.</li><li>Relevant certifications such as CISA, CISM, CRISC, or ISO 27001 Lead Auditor are highly preferred.</li><li>Assist in preparing technical proposals for new venture or collaborations .</li></ul><p><b>Qualification</b></p><ul><li>BS - Computer Science /Information Systems / Cyber Security or related fields.</li></ul><p><b>Experience</b></p><ul><li>6+ years of experience in IT audit, advisory, cyber security or related fields (preferably in Big 4 firms or any similar sector/consulting services).</li></ul><p>Job Type: Full-time</p><p>Pay: From Rs200,000.00 per month</p><p>Application Question(s):</p><ul><li>Do you have experience in IT audit, advisory, cyber security or related fields ?</li><li>Have you completed Bachelors in Computer Science /Information Systems / Cyber Security or related fields.?</li></ul><ul><li>Do you have experience working in any Big four Firms?</li></ul><ul><li>What is your current salary?</li></ul><ul><li>What is your expected salary?</li></ul><ul><li>What will be your notice period?</li></ul><p>Location:</p><ul><li>Karachi (Required)</li></ul><p>Work Location: In person</p>

Manager - Technology and Cyber Risk Advisory

Revolut

<div><b>About Revolut</b><p></p><p>
People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products &mdash; including spending, saving, investing, exchanging, travelling, and more &mdash; help our 70+ million customers get more from their money every day.</p><p>
As we continue our lightning-fast growth,&zwnj; 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work&trade;. So far, we have 13,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.</p><p></p><b>
About the role</b><p></p><p>
Our Information Security team protects Revolut's systems, data, and people. They combine technical expertise with a proactive, risk-based mindset to stay ahead of threats and keep our technology and customers secure at every step.</p><p>
We're looking for an Information Security Manager to lead our local security strategy and collaborate with regulators, management, and the Risk and Compliance team. You&rsquo;ll oversee the entire security lifecycle, from identifying risks and managing vulnerabilities to ensuring our third-party vendors meet strict standards.</p><p>
Up to shape what's next in finance? Let's get in touch.</p><p></p><b>
What you'll be doing</b><p></p><ul><li>
Classifying information assets according to security requirements and maintaining detailed asset and data inventories</li><li>
Developing, implementing, and regularly updating information security policies, procedures, and standards in line with regulatory requirements (BDDK, ISO 27001, PCI-DSS)</li><li>
Establishing identity authentication mechanisms and network security control systems according to regulatory standards</li><li>
Protecting confidential information and managing limited access permissions for third-party service providers and vendors</li><li>
Establishing and managing cyber incident response processes</li><li>
Identifying, assessing, and prioritising information security risks across systems, networks, and data assets while monitoring mitigation controls</li><li>
Overseeing periodic vulnerability assessments and penetration tests and tracking the remediation of identified weaknesses</li><li>
Ensuring full alignment with BDDK's IT regulations, KVKK, and other applicable frameworks while supporting regulatory audits</li><li>
Designing and testing business continuity and disaster recovery plans to ensure operational resilience</li><li>
Conducting information security awareness activities, including bulletins, communications, and regular phishing simulation tests</li><li>
Providing regular reporting to the board, senior management, and regulatory bodies regarding security posture and control effectiveness</li></ul><p></p><b>
What you'll need</b><p></p><ul><li>
7+ years of experience in information security management, ideally within a regulated financial institution (financial services, banking, or payments)</li><li>
Relevant certifications, such as CISM, CISSP, ISO 27001 Lead Implementer</li><li>
Knowledge of BDDK BS regulation, KVKK, ISO 27001, PCI-DSS, and COBIT</li><li>
A university degree in computer engineering, information systems, or related field</li><li>
Expertise in managing outsourced IT and InfoSec services</li><li>
Experience delivering localised IT and InfoSec policies aligned with regulatory standards</li><li>
Excellent stakeholder management and communication skills</li></ul><p></p><p><i>
Building a global financial super app isn&rsquo;t enough. Our Revoluters are a priority, and that&rsquo;s why in 2021 we launched our inaugural D&amp;I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We&rsquo;re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That&rsquo;s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.</i></p><p><b><i>
Important notice for candidates:</i></b></p><p><i>
Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.</i></p><ul><li><b><i>Only apply through official Revolut channels.</i></b><i> We don&rsquo;t use any third-party services or platforms for our recruitment.</i></li><li><b><i>Always double-check the emails you receive.</i></b><i> Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.</i></li></ul><p><b><i>
We won't ask for payment or personal financial information during the hiring process.</i></b><i> If anyone does ask you for this, it&rsquo;s a scam. Report it immediately.</i></p><p><i>
By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's </i><i>Candidate Privacy Notice</i></p><p>
Notice: This is a remote position based in Turkey.</p></div>

Information Security Manager

The Home Depot

<div><p><b>Position Purpose:</b></p><div><div><p>
The <b>Cybersecurity </b><b>Manager, Technology Asset Management</b> is responsible for leading the team that governs the lifecycle of technology assets across The Home Depot&rsquo;s enterprise environment. This role owns and advances processes, data quality, and tooling that ensure technology assets are accurately inventoried, compliant, cost-effective, and available to support business and technology objectives.</p></div><div><p>
This leader will partner closely with Infrastructure, Engineering, Security, Finance, and Procurement teams to drive standards, enable risk management, and deliver actionable insights from asset data.</p></div><p></p><div><p><b><br>
Major Tasks, Responsibilities &amp; Key Accountabilities</b></p></div><div><ul><li><p>
Lead a team of asset management analysts/engineers responsible for end‑to‑end <b>technology asset lifecycle management</b> (planning, acquisition, deployment, maintenance, optimization, and retirement).</p></li></ul></div><div><ul><li><p>
Own and mature the <b>enterprise technology asset inventory</b>, ensuring completeness, accuracy, and timeliness of data across environments (store, DC, data center, cloud, corporate).</p></li></ul></div><div><ul><li><p>
Define, implement, and continuously improve <b>governance, processes, and controls</b> for hardware, software, and cloud assets in alignment with enterprise technology and security policies.</p></li></ul></div><div><ul><li><p>
Partner with Engineering, Infrastructure, Security, and Operations to <b>integrate asset management practices</b> into standard delivery and operational workflows.</p></li></ul></div><div><ul><li><p>
Collaborate with Finance, Procurement, and Vendor Management to support <b>budgeting, forecasting, and vendor optimization</b> through accurate asset data and reporting.</p></li></ul></div><div><ul><li><p>
Establish and monitor <b>KPIs and SLAs</b> for asset management (e.g., inventory accuracy, reconciliation timeliness, compliance coverage, renewal timelines).</p></li></ul></div><div><ul><li><p>
Drive <b>audit and compliance readiness</b> related to technology assets (e.g., license compliance, hardware tracking, data protection obligations), providing clear evidence and reporting.</p></li></ul></div><div><ul><li><p>
Champion <b>data quality</b> across asset management repositories and related systems; lead root-cause analysis and remediation for data and process defects.</p></li></ul></div><div><ul><li><p>
Identify and execute <b>continuous improvement initiatives</b>, including automation opportunities, standardization of asset attributes, and improved integration with adjacent systems.</p></li></ul></div><div><ul><li><p>
Develop and maintain <b>standards, documentation, and playbooks</b> for technology asset management processes and tools.</p></li></ul></div><div><ul><li><p>
Manage team performance: set goals, provide coaching and feedback, support development plans, and foster a culture of accountability, inclusion, and continuous learning.</p></li></ul></div><div><ul><li><p>
Communicate <b>status, risks, and opportunities</b> to senior technology leadership through clear reporting and executive-ready materials.</p></li></ul></div></div><p></p><div><div><p><b><br>
Minimum Qualifications</b></p></div><div><ul><li><p><b>
Bachelor&rsquo;s degree</b> in Information Technology, Computer Science, Business, Finance, or related field, or equivalent practical experience.</p></li></ul></div><div><ul><li><p><b>
5+ years</b> of experience in Technology Asset Management, IT Service Management, Infrastructure, or related technology roles.</p></li></ul></div><div><ul><li><p><b>
2+ years</b> of people leadership experience, including hiring, coaching, and performance management.</p></li></ul></div><div><ul><li><p>
Demonstrated experience managing <b>asset inventories and lifecycle processes</b> in a complex, distributed enterprise environment.</p></li></ul></div><div><ul><li><p>
Experience working with <b>cross-functional technology and business stakeholders</b> (e.g., Engineering, Security, Finance, Procurement).</p></li></ul></div><p></p><div><p><b><br>
Preferred Qualifications</b></p></div><div><ul><li><p>
Experience in a <b>large-scale retail or similarly complex, distributed environment</b>.</p></li></ul></div><div><ul><li><p>
Hands-on experience with <b>ITAM/CMDB tools</b> and related integrations (e.g., discovery, monitoring, procurement, service management).</p></li></ul></div><div><ul><li><p>
Familiarity with <b>ITIL</b> or related frameworks for service and asset management.</p></li></ul></div><div><ul><li><p>
Experience supporting <b>audit and compliance</b> efforts for hardware, software, or cloud assets.</p></li></ul></div><div><ul><li><p>
Demonstrated success in driving <b>process improvement and automation</b> in technology operations.</p></li></ul></div><p></p><div><p><b><br>
Knowledge, Skills, Abilities</b></p></div><div><ul><li><p>
Strong understanding of <b>technology asset lifecycle</b> concepts (hardware, software, and cloud), including inventory, configuration, licensing, and retirement.</p></li></ul></div><div><ul><li><p>
Ability to interpret and act on <b>financial and operational data</b>, including TCO, utilization, and optimization opportunities.</p></li></ul></div><div><ul><li><p>
Proven <b>people</b><b> </b><b>leadership</b> and team-building skills, with the ability to mentor and develop high-performing associates.</p></li></ul></div><div><ul><li><p>
Strong <b>analytical and problem-solving</b> skills; able to decompose complex problems and drive structured solutions.</p></li></ul></div></div><div><div><ul><li><p>
Excellent <b>communication and storytelling</b> skills, including the ability to translate asset data and risk into clear, actionable insights for executive and non-technical audiences.</p></li></ul></div><div><ul><li><p>
Ability to <b>influence and drive change</b> across organizational boundaries without direct authority.</p></li></ul></div><div><ul><li><p>
Strong <b>organizational skills</b> and attention to detail; able to manage multiple priorities in a fast-paced environment.</p></li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p></div></div><ul><li>
Typically reports to the Software Engineer Sr. Manager, Technology Director or Sr. Director.</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
Typically requires overnight travel 5% to 20% of the time.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><p></p><p><b>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
8+</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Attracts Top Talent: Attracting and selecting the best talent to meet current and future business needs</li><li>
Balances Stakeholders: Anticipating and balancing the needs of multiple stakeholders</li><li>
Builds Effective Teams: Building strong-identity teams that apply their diverse skills and perspectives to achieve common goals</li><li>
Business Insight: Applying knowledge of business and the marketplace to advance the organization's goals</li><li>
Collaborates: Building partnerships and working collaboratively with others to meet shared objectives</li><li>
Communicates Effectively: Developing and delivering multi-mode communications that convey a clear understanding of the unique needs of different audiences</li><li>
Develops Talent: Developing people to meet both their career goals and the organization's goals</li><li>
Drives Engagement: Creating a climate where people are motivated to do their best to help the organization achieve its objectives</li><li>
Drives Vision and Purpose: Painting a compelling picture of the vision and strategy that motivates others to action</li><li>
Manages Ambiguity: Operating effectively, even when things are not certain or the way forward is not clear</li><li>
Organizational Savvy: Maneuvering comfortably through complex policy, process, and people-related organizational dynamics</li><li>
Situational Adaptability: Adapting approach and demeanor in real time to match the shifting demands of different situations</li></ul></div><p></p>

Cybersecurity Manager, Technology Asset Management (Remote)

Infinite pl

<div><div><div><div><p><b>Infinite pl</b> is a digital-led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We are enabled through in-house, external, network, and investment capabilities that we utilize to orchestrate and build innovative platforms tackling complex problems within logistics and adjacent sectors.</p><br>
<p></p>
<p><b>
Infinite pl&rsquo;s mission</b> is nothing short of a logistics revolution! We're here to enrich the experiences of governments, businesses, and residents around the world through cutting-edge digital solutions.</p><br>
<p></p>
<p><b>
We're not just players; we're game-changers.</b></p>
</div>
</div></div><h3 class="jobSectionHeader"><b>Role Summary:</b></h3><div>
<div><div>The<b> IT Security Operations Manager </b>is responsible for leading the IT security operations function, ensuring the stability, availability, and protection of IT systems, infrastructure, and services. The role focuses on operational security controls, governance, and coordination with infrastructure and service teams.</div>
</div></div><h3 class="jobSectionHeader"><b>Key Responsibilities:</b></h3><div>
<div><ul><li>Lead the IT Security Operations function and define its strategy and roadmap</li><li>Ensure protection and secure operation of IT infrastructure, systems, and services</li><li>Oversee implementation of IT security operational controls across environments</li><li>Manage IT security incidents from an operational perspective and ensure proper resolution</li><li>Ensure compliance with internal IT security policies and operational standards</li><li>Coordinate with infrastructure, cloud, and service delivery teams</li><li>Oversee access management, privileged access controls, and system hardening</li><li>Monitor IT security operational risks and ensure mitigation plans are in place</li><li>Lead and develop the IT security operations team</li></ul>
</div></div><h3 class="jobSectionHeader"><b>Key Requirements:</b></h3><div>
<div><ul><li>Strong experience in IT operations and infrastructure security</li><li>Deep understanding of ITIL, access management, and system controls</li><li>Experience in managing enterprise IT environments</li><li>Strong leadership and stakeholder management skills</li><li>Ability to coordinate across IT infrastructure and service teams</li></ul>
</div></div><div><div><div>Infinite pl ️ - where innovation meets logistics, and the journey is Infinitely boundless!<br>
Let's disrupt logistics together and explore infinite opportunities!</div>
</div>
</div><p>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

IT Security Operations Manager

Qatar National Bank

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be primarily responsible in providing support of the Information Security solutions. This includes provide first and second line support and maintain key technology solutions designed to protect the firm from cyber security attacks. The incumbent will be the focal point for end user escalations for security technology issues they may be experiencing.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Implements KPI&rsquo;s and best practices for Security Technologies Services - Act within the limits of the powers delegated to the incumbent. - Support to maintain KPI&rsquo;s and best practices for AVP &ndash; Cyber Security Technologies &amp; Services
</p><p>B. Customer (Internal &amp; External): - Provide 1st level support to key technical security solutions in line with business strategies and objectives of the group - Support operational process, procedures and guidelines, aligned to good practise for service management, problem and incident management, change management and configuration management. - Support end users with installation and troubleshooting of GIS provided and supported security products on their devices. - Review of IT and business requests for change requests to security controls (for example: firewall change reviews) - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives. - Provide timely/accurate data to external/internal Auditors, Compliance, Financial Control and Risk when required.
</p><p>C. Internal (Processes, Products, Regulatory): - Support the design and implementation of the QNB's information security program. - Develop, implement and administer technical security standards, as well as a suite of security services and tools to address and mitigate security risk. - Examine impacts of new technologies on the QNB's overall information security profile. - Establish processes to review implementation of new technologies to ensure security compliance. - Responsible to ensuring that any audit issues or identified regulatory gaps are addressed timely.
</p><p>D. Learning &amp; Knowledge: - Possess an understanding of business processes and controls in all related operational areas. - Must have an expert understanding of information security issues, best practices, and a working knowledge of IT systems. - Create education and training program within the team and advise operating units at all levels on security issues, best practices, and vulnerabilities. - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Ensure speedy resolution of unresolved grievances or conflicts within the team members. E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks.</p><p>
F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s degree preferably in computer science, computer engineering or related subjects.
</li><li>At least 6 years of relevant experience, preferably within a highly rated international bank or large corporate in an information security engineering capacity.
</li><li>Professional certification such as CISSP is mandatory
</li><li>Security engineering certifications and qualifications in Microsoft operating systems (such as MCSA, MCSE, et al) or Linux (such as RHCP, et al) are mandatory</li></ul>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Manager Security Technologies Services

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
1. Ensure proper management of the Information Security Controls and Governance resources to support ongoing business initiatives from a security controls and governance perspectives, ensuring the development of the necessary security access matrix mapped to the staff&rsquo;s job titles and business activities.</p>
<p>
2. Develop and Monitor the Information Security Controls and Governance Area&rsquo;s Key Performance Indicators and ensure adherence to the same. This includes monitoring of the TAT and SLAs of handling the different access management requests. In addition to the KPIs &amp; KRIs related to the Security Controls periodic reviews and assessments.</p>
<p>
3. Ensure the annual review and update of the Information Security Controls and Governance area processes and procedures with the development and adherence to the developed SLAs.</p>
<p>
4. Manage and oversee the implementation of the Data Classification &amp; Protection program to ensure proper classification framework is defined that helps classify and protect the bank&rsquo;s crown jewels and critical information assets. This includes maintaining the controls necessary to protect information and vital assets in accordance with security requirements and industry standards (privacy requirements, Personal Identifiable Information, encryption, Data Loss Prevention, data retention and destruction) for both structured and unstructured data.
</p><p>5. Ensure proper timely tracking and closure of open (internal/External) audit issues.</p>
<p>
6. Manage and oversee the Identity Access Management and Governance program to ensure proper governance of identities during the employment life cycle of all personnel in accordance with the security requirements and policies. including the development of the applications&rsquo; security matrix.</p>
<p>
7. Manage and oversee the implementation of the Security Controls and Governance roadmap to ensure the planned reviews are conducted as per the predefined frequencies as well as the closure of the identified gaps in a timely manner, and ensure conducting access rights certification campaigns over the different bank systems to validate current access rights granted to employees, and ensure proper enforcements of actions identified as an outcome of the campaigns.</p>
<p>
8. Handle and manage exceptions and escalations to ensure proper support and alignment is in place between Information Security Controls and Governance area and the different stakeholders. This includes resolving communication conflicts to ensure a streamlined process is in place.</p>
<p>
9. Work collaboratively with Business units, IT teams, Audit, Legal and risk management functions to address open gaps/issues driven from internal/external audit, independent assessments and reviews as applicable, and ensure proper tracking mechanism is in place in coordination with the relevant stakeholders.</p>
<p>
10. Ensure proper enforcement of the developed security policies and controls including Physical and Environmental Security policy, Human Resources Security Policy, Information Governance Policy. This in addition to the URL Filtering, Internet Access Policies as well as the Data Loss Prevention Policies.</p>
<p>
11. Ensure adherence to the defined security controls operating model to support the different security controls requirements and communicate violations to the relevant teams. This includes managing the different security controls approvals including (Removable media access, Remote Working Access, Internet Access, External Email Access, EMM, etc..) ensuring adherence to the set SLAs and TAT.</p>
<p>
12. Assess and take the necessary actions towards the different policies&rsquo; violations identified through the Privileged Access Management, Security Monitoring Tools such as NexThink, DLP or through the on-going SOC monitoring and reporting.</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<p>
 Bachelor&rsquo;s degree of Engineering, Computer Science, Information Security or equivalent.</p>
<p>
 Minimum 8 - 10 years of experience in IT, Information Security, Risk Analysis and / or Governance and Compliance</p>
<p>
 Recommended Certifications</p>
<p>
o SANS Global Information Assurance Certification (GIAC)</p>
<p>
o CRISC</p>
<p>
o ISO 27001:2013 Lead implementer
</p><p>o CISM</p>
<p>
Skills</p>
<p>
 Very good command of English and Arabic languages</p>
<p>
 Very good Management and leadership skills
</p> <p>Very good Negotiation skills</p>
<p>
 Excellent Communication skills</p><div><br>
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 3</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div><div>
Travel: No</div></div>

INFORMATION SECURITY CONTROLS & GOVERNANCE MANAGER

Excel Career Solutions

<p><b>Job Description:</b></p><p>The candidate will be responsible for:</p><ul><li>Establishing and maintaining cybersecurity frameworks.</li><li>Ensuring compliance with Saudi data protection laws and global pharma standards.</li><li>Managing IT infrastructure, networks, servers, and cloud environments.</li><li>Overseeing implementation and validation of systems such as ERP, LIMS, and MES.</li><li>Maintaining an IT Master Register of all computerized systems and equipment across the organization.</li><li>Establishing IT policies for the organization.</li><li>Developing and implementing a comprehensive backup strategy covering all critical systems (ERP, LIMS, MES, QMS, databases, and infrastructure).</li><li>Ensuring regular, automated backups with defined retention policies in line with regulatory requirements (SFDA, FDA 21 CFR Part 11, EU Annex 11).</li><li>Establishing and testing data restoration procedures to guarantee rapid recovery in case of system failures, cyber incidents, or data corruption.</li><li>Conducting periodic disaster recovery drills to validate readiness.</li><li>Managing all PLCs linked to factory machinery/instruments, ensuring full organizational control over passwords, access, and recovery systems.</li></ul><p><b>Requirements:</b></p><ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Information Technology, Computer Science, or a related field.</li><li>7&ndash;10+ years of experience in IT management, preferably in the pharmaceutical or regulated manufacturing industry.</li><li>Strong knowledge of cybersecurity frameworks, risk management, and data protection practices.</li><li>Experience with regulatory compliance standards such as SFDA, FDA 21 CFR Part 11, and EU Annex 11.</li><li>Proven experience managing IT infrastructure, including networks, servers, cloud platforms, and virtualization.</li><li>Hands-on experience with enterprise systems such as ERP, LIMS, MES, and QMS.</li><li>Experience in system validation (CSV) within a GMP environment.</li><li>Strong understanding of backup strategies, disaster recovery planning, and business continuity.</li><li>Familiarity with PLC systems and industrial automation environments is highly desirable.</li><li>Excellent leadership, stakeholder management, and cross-functional coordination skills.</li><li>Strong problem-solving abilities with a proactive and detail-oriented mindset.</li><li>Effective communication skills, both written and verbal.</li></ul><p>Job Type: Full-time</p><p>Pay: ﷼23,000.00 - ﷼25,000.00 per month</p><p>Experience:</p><ul><li>Cyber security: 6 years (Required)</li><li>Pharma Manufacturing industry: 6 years (Required)</li></ul><p>Work Location: In person</p>

IT Manager- Cyber Security

Search 10000+ Information technology security manager jobs near you this May. New roles added regularly across leading industries. Apply today.