security compliance manager

Graphcore

<div><h2 class="jobSectionHeader">About us</h2>

Graphcore is one of the world's leading innovators in Artificial Intelligence compute.

It is developing hardware, software and systems infrastructure that will unlock the next generation of AI breakthroughs and power the widespread adoption of AI solutions across every industry.

As part of the SoftBank Group, Graphcore is a member of an elite family of companies responsible for some of the world's most transformative technologies. Together, they share a bold vision: to enable Artificial Super Intelligence and ensure its benefits are accessible to everyone.

Graphcore's teams are drawn from diverse backgrounds and bring a broad range of skills and perspectives. A melting pot of AI research specialists, silicon designers, software engineers and systems architects, Graphcore enjoys a culture of continuous learning and constant innovation!
<h2 class="jobSectionHeader">
Job Summary</h2>

We are seeking a Compliance Manager to define, implement, and scale security and compliance frameworks spanning our global lab environments. This role will focus on securing sensitive hardware, enforcing access controls, and ensuring engineering data and infrastructure meet required compliance standards.

You will play a meaningful role in enabling secure AI hardware development by establishing robust processes around lab zoning, asset tracking, and network segmentation while partnering with engineering teams across multiple locations.
<h2 class="jobSectionHeader">
The Team</h2>

You will be part of a cross-functional security and infrastructure team supporting Graphcore's international engineering centers, including the new AI Engineering Campus in Austin.

The team works closely with hardware engineers, IT, and security stakeholders to ensure compliance controls are embedded into lab environments and operational workflows.
<h2 class="jobSectionHeader">
Responsibilities and Duties</h2>
<ul><li>Define and implement physical access controls, including lab zoning and restricted areas</li>
<li>Ensure sensitive hardware is secured and not exposed within lab environments</li>
<li>Enforce network division and permission management across mixed infrastructure environments</li>
<li>Coordinate hardware asset monitoring, inventory oversight, and chain-of-custody activities</li>
<li>Support secure lab bring-up and infrastructure deployment activities</li>
<li>Implement and scale compliance controls across global engineering labs</li>
<li>Partner with engineering departments to ensure secure handling of engineering data through approved systems</li>
<li>Supervise and improve compliance with internal security policies and external standards</li>
<li>Contribute to the development of secure infrastructure practices within AI and hardware environments</li>
</ul><h2 class="jobSectionHeader">Candidate Profile</h2>

Essential:
<ul>
<li>Hands-on experience implementing physical access control and lab zoning</li>
<li>Having worked in labs, data centers, or hardware engineering environments</li>
<li>Practical experience with network segmentation and access control</li>
<li>Experience running hardware asset tracking, inventory, and custody</li>
<li>Experience working in secure infrastructure or lab bring-up environments</li>
<li>Strong understanding of operational security controls in technical environments</li>
</ul><h2 class="jobSectionHeader">Desirable:</h2>
<ul><li>Exposure to export-controlled environments</li>
<li>Experience in AI, HPC, semiconductor, or hardware validation labs</li>
<li>Familiarity with BMC / out-of-band (OOB) networks and rack-level infrastructure</li>
<li>Solid understanding of ISO 27001, SOC 2, or NIST frameworks (practical application preferred)</li></ul></div>

Compliance Manager - Global Lab Environment

First Abu Dhabi Bank (FAB)

<div>
 
 
 JOB PURPOSE:
 
 
 
 The
 
 
 Manager &ndash; Information Security will be responsible for managing FAB Kuwait&rsquo;s Information Security, Business Continuity and Data Privacy Program. He/She serves as the process owner of the appropriate second-line functional activities related to confidentiality, integrity, availability of Information assets in addition to Data Privacy and Buiness continuity as well third party risk management and physical security in compliance with regulatory requirements.
 
 
 
 
 
 The role will report directly to the Head of Risk &ndash; Kuwait and functionally to the Head of International Information Security at the Group, and shall be responsible to plan, implement, monitor and review the information security program for FAB Kuwait in consultation with Group Information Security Office &ndash; Head office team. The Manager &ndash; Information Security shall ensure the information security program, Data Privacy program and Business Continuity Management Program is in alignment with the regulatory, legal and statutory requirements of FAB Kuwait and the business strategy. The Manager &ndash; Information Security role will be operating out of the FAB Kuwait branch.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 <ul>
 <li>
 Review and Maintain Information Security, Buisness Contnuity and Data Privacy Policies, Standards, and Procedures for FAB Kuwait.
 </li>
 <li>
 Participate in discussions and coordinate activities between local business units, support functions, Compliance Team, IT and GSO &ndash; HO for information security and Data Privacy, related planning, implementations and review.
 </li>
 <li>
 Ensure compliance as per regulatory requirements (all Information Security / Bsiness Continuity/ Personal Data Protection specific regulations applicabe to FAB Kuwait / Third party risk management / Physical security .).
 </li>
 <li>
 Provide regular reporting on the status of information security program, initiatives, security &amp; technology risks and relevant incidents to the executive management.
 </li>
 <li>
 Laise with external agencies such as regulatory/advManager - Information Securityry/law enforcement bodies, as necessary, to ensure that the FAB Kuwait maintains a strong security posture and is kept well abreast of relevant threats identified by these agencies.
 </li>
 <li>
 Review new regulatory legislations; promptly communicate all regulatory notices/circulars to all concerned areas, provide interpretations if necessary; develop/monitor action plans towards its implementation.
 </li>
 <li>
 Assist Head office during Regulatory Examinations; ensure implementation/regularization of observations linked to compliance while meeting the deadline(s).
 </li>
 <li>
 Review Technology Risk Assessments for IT Projects, RCSA , Third party and Facility Risk assessments.
 </li>
 <li>
 Assist and support for Internal and External Audits. Monitor and track all open infosec issues with IT and concerned stakeholders.
 </li>
 <li>
 Oversee the tracking and closure of Security, BCM &amp; Privacy related Audit findings of FAB Kuwait.
 </li>
 <li>
 Govern the security awareness program for FAB Kuwait staff and customers.
 </li>
 <li>
 Provide support to FAB CSIRT and Group Data privacy for information security incident response and personal data breach handling.
 </li>
 <li>
 Provide SLOD oversight and support the business unit on the implementation of business continuity program in line with local regulatory requirements and Group BCM framework practices and RACI.
 </li>
 <li>
 Coordination with Business units/Fraud Risk / GSO for digital forensic investigation.
 </li>
 <li>
 Review and assess the regulatory circulars/notices, discuss with GSO-HO and enforce security controls as applicable.
 </li>
 <li>
 Assist Group Information Security Office&ndash; Head Office team in delivery of information security services to the branch such as vulnerability assessment, penetration testing, SOC monitoring etc.
 </li>
 <li>
 Review Management Dashboards/Security MIS related to Patching, VA, PT, Baselines and end point security controls and highlight risks to the branch executive management.
 </li>
 <li>
 Assess and Review Change Requests and Security Exceptions for FAB Kuwait.
 </li>
 <li>
 Review BRDs, Solution Design, Product Papers from Information Security, Data Privacy and Busines Continuity perspective and any other requirements for FAB Kuwait business units.
 </li>
 <li>
 Review and track compliance for Data Privacy and Protection controls.
 </li>
 <li>
 Review KPI and KRI for country information security processes.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS &amp; EXPERIENCE:
 
 
 <ul>
 <li>
 Information Security or IT Security or IS Audit background.
 </li>
 <li>
 Must be having a minimum 8 years of Information Security Experience.
 </li>
 <li>
 Expert knowledge of Information Security Domains and should be certified (CISA, CISSP or CISM or any other relevant security certification).
 </li>
 <li>
 Experience in a similar type of role in a multinational business and dealing with regulatory authorities, governments and industry bodies.
 </li>
 <li>
 Experience in managing security compliance teams.
 </li>
 <li>
 Knowledge of CBK regulatios on Cyber security, Business continuity, &amp; local privacy regulations.
 </li>
 <li>
 Ability to comply with Data Privacy Policy / procedures, draft / update local Data Privacy Polcies. Review local Business initiatives and SOPs where required, for compliance with Data Privacy Compliance requirements in co-ordination with H.O. Teams.
 </li>
 <li>
 Ability to make good judgments regarding security risk and to prioritize resources and activity around managing those risks.
 </li>
 <li>
 Able to conduct the role independently and with integrity.
 </li>
 <li>
 Ability to plan, organize and prioritize tasks and projects.
 </li>
 <li>
 Good personal communication skills capable of dealing with wide range of stakeholders, including senior management.
 </li>
 <li>
 Fluent (spoken and written) in English, Arabic.
 </li>
 </ul>
</div>

Manager – Information Security - Kuwait

SpaceX

<div><div>SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.</div>
OPERATIONS ENGINEER, SECURITY
The Security Operations Engineer is a seasoned leader specializing in project management, data analysis, dashboard creation, and compliance oversight within fast-paced, high-tech environments. In this role, you will work alongside our security team and lead cross-functional and multi-disciplinary teams to optimize security operations and related risk management functions, supporting overall business operations through strategic planning, process optimization, and resource alignment to tasks. You will drive initiatives to develop and maintain analytical dashboards for real-time monitoring and reporting, refine existing applications and systems, conduct in-depth data analysis to identify trends and risks, and ensure adherence to federal, state, local laws, and company policies across all security functions. This is an opportunity for emerging leaders who can apply principles of operations management and data analytics to solve complex security challenges, conduct rigorous problem analysis, and steer and execute strategic decisions within the business. 
 
RESPONSIBLITIES:
<ul>
<li>Lead and manage security projects from inception to completion, including planning, resource allocation, timeline management, and stakeholder coordination to enhance operational efficiency and risk mitigation</li>
<li>Monitor, analyze, provide strategic insights, execute, and improve against key performance indicators for security operations (especially incident response times, threat detection rates, compliance audit scores, security breach incidents, employee training completion rates, vulnerability resolution rates, risk assessment scores, resource utilization efficiency, and budget adherence for security initiatives)</li>
<li>Design, develop, and maintain interactive dashboards using tools like Power BI, JIRA, or similar platforms to visualize security metrics, incident data, and performance indicators for real-time decision-making</li>
<li>Perform comprehensive data analysis on security logs, incident reports, and operational metrics to identify patterns, vulnerabilities, and emerging threats, providing actionable insights to senior leadership</li>
<li>Collaborate with cross-functional teams (e.g., IT, facilities, and HR) to integrate security best practices into business processes and implement corrective actions based on analytical findings</li>
<li>Monitor and report on key performance indicators (KPIs) related to security operations, such as response times, incident resolution rates, and compliance adherence, while forecasting future needs and trends</li>
<li>Train and mentor security team members on data-driven tools, compliance protocols, and project management methodologies to foster a culture of continuous improvement</li>
<li>Develop and update security policies, procedures, and emergency response plans, incorporating data analysis to proactively address potential risks in a high-tech environment</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>Bachelor's degree in computer science, information technology, cybersecurity, or an engineering field</li>
<li>2+ years of experience in operations/process improvement/consulting (internship experience qualifies)</li>
<li>Experience with Excel, SQL, python</li>
</ul>
PREFFERED SKILLS AND EXPERIENCE:
<ul>
<li>5+ years of professional experience in security engineering, systems administration, or a similar role in fast-paced, high-tech environments</li>
<li>Experience in data analysis, compliance oversight, or leading cross-functional teams for operational efficiency</li>
<li>Experience in configuring Atlassian Cloud products, including Jira and Confluence.</li>
<li>Experience working with the Esri ArcGIS Suite, including ArcGIS Pro, ArcGIS Online, and ArcGIS Enterprise with skills in leveraging GIS for security applications, such as mapping facility layouts, asset tracking, threat analysis, and geospatial data visualization</li>
<li>Experience in automating using scripting languages (Python, Javascript, etc.)</li>
<li>Ability to lead and collaborate effectively with multi-disciplinary teams, including IT, facilities, HR, and executive stakeholders</li>
<li>Proficiency in data visualization and dashboard tools like Power BI, Tableau, or similar platforms for real-time monitoring and reporting</li>
<li>Experience conducting comprehensive data analysis on operational metrics, logs, and incident reports to identify trends, risks, and vulnerabilities</li>
<li>Familiarity with federal, state, and local security regulations, as well as industry standards for compliance and risk management</li>
<li>Digital forensics, threat assessment, or emergency response planning experience in physical</li>
<li>Possession of at least two of the following certifications is a plus: PMP (Project Management Professional), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CPP (Certified Protection Professional), or data analytics certifications like Microsoft Certified: Power BI Data Analyst Associate</li>
<li>Advanced understanding of security operations disciplines, such as incident response, vulnerability management, and resource utilization, to analyze and mitigate risks</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Must be able to work extended hours and/or weekends as needed, including occasional short-notice domestic travel</li>
<li>Active Top Secret or TS/SCI. Note that an active clearance may provide the opportunity for you to work on sensitive SpaceX missions. If so, you will be subject to pre-employment drug and random drug and alcohol testing</li>
</ul>
COMPENSATION AND BENEFITS:

Pay range:

Operations Engineer /Level I: $100,000.00 - $115,000.00/per year

Operations Engineer /Level II: $110,000.00 - $135,000.00/per year

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Those with an active clearance will receive a 10% differential, up to an additional $15,000 annually, once officially briefed into a classified program.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.<div>
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. &sect; 1157, or (iv) Asylee under 8 U.S.C. &sect; 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.</li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX's Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.</div></div>

Operations Engineer, Security

Nawy

<div>
 We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
 
 
 in Nawy. This role ensures that security risks are identified, assessed, and managed while
 
 
 maintaining compliance with relevant regulatory and industry standards.
 
 
 The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
 
 
 manages security awareness, and partners closely with engineering, product, and legal teams
 
 
 to ensure secure-by-design operations across the entire organization.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Maintain an enterprise-wide information security governance &amp; ISMS framework that
 
 
 </li>
 </ul>
 aligns with business objectives, regulatory requirements, and industry best practices.
 
 
 <ul>
 <li>
 Develop, maintain, and enforce security policies, standards, and procedures
 </li>
 <li>
 Lead strategic planning initiatives for security risk management, ensuring alignment
 
 
 </li>
 </ul>
 with ISO 27001 requirements.
 
 
 <ul>
 <li>
 Design, implement, and manage a security risk management framework that includes
 
 
 </li>
 </ul>
 risk assessments, control evaluations, and mitigation strategies.
 
 
 <ul>
 <li>
 Oversee and continuously improve the processes for vendor security risk assessments,
 
 
 </li>
 </ul>
 ensuring third-party risks are effectively managed.
 
 
 <ul>
 <li>
 Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the
 
 
 </li>
 </ul>
 effectiveness of security controls and risk mitigation efforts.
 
 
 <ul>
 <li>
 Oversee the development, implementation, and ongoing management of the
 
 
 </li>
 </ul>
 organization's security policies.
 
 
 <ul>
 <li>
 Prepare and lead the organization's readiness for external and internal security audits,
 
 
 </li>
 </ul>
 including ISO 27001 certification audits.
 
 
 <ul>
 <li>
 Build and run security awareness and phishing simulation programs and promote an
 
 
 </li>
 </ul>
 organization-wide culture of security accountability.
 
 
 <ul>
 <li>
 Ensure ongoing compliance with local regulatory frameworks, including those issued by
 
 
 </li>
 </ul>
 CBE, FRA, and related bodies.
 
 
 
 Requirements
 
 
 
 <ul>
 <li>
 At least 4 years of experience in GRC, information security risk management or security
 
 
 </li>
 </ul>
 compliance roles.
 
 
 <ul>
 <li>
 Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are
 
 
 </li>
 </ul>
 preferred.
 
 
 <ul>
 <li>
 Demonstrated experience with ISO 27001 implementation, security audits, and vendor
 
 
 </li>
 </ul>
 security risk assessments.
 
 
 <ul>
 <li>
 Solid understanding of cloud architectures and security controls across AWS and
 
 
 </li>
 </ul>
 Google Cloud Platform (GCP).
 
 
 <ul>
 <li>
 Familiarity with regulatory requirements in Egypt and international data protection
 
 
 </li>
 </ul>
 laws.
 
 
 <ul>
 <li>
 University/college degree in a relevant professional field
 </li>
 <li>
 Excellent communication skills in English, both written and spoken
 </li>
 </ul>
</div>

Cyber Security GRC Lead

Nawy Real Estate

<div>We are seeking an experienced GRC Lead to drive governance, risk, and compliance activities
in Nawy. This role ensures that security risks are identified, assessed, and managed while
maintaining compliance with relevant regulatory and industry standards.
The GRC lead leads the risk governance initiatives, oversees audits, develops policies,
manages security awareness, and partners closely with engineering, product, and legal teams
to ensure secure-by-design operations across the entire organization.
Responsibilities<ul><li>Maintain an enterprise-wide information security governance &amp; ISMS framework that</li></ul>
aligns with business objectives, regulatory requirements, and industry best practices.<ul><li>Develop, maintain, and enforce security policies, standards, and procedures.</li><li>Lead strategic planning initiatives for security risk management, ensuring alignment</li></ul>
with ISO 27001 requirements.<ul><li>Design, implement, and manage a security risk management framework that includes</li></ul>
risk assessments, control evaluations, and mitigation strategies.<ul><li>Oversee and continuously improve the processes for vendor security risk assessments,</li></ul>
ensuring third-party risks are effectively managed.<ul><li>Develop and monitor key risk indicators (KRIs) and performance metrics to evaluate the</li></ul>
effectiveness of security controls and risk mitigation efforts.<ul><li>Oversee the development, implementation, and ongoing management of the</li></ul>
organization&rsquo;s security policies.<ul><li>Prepare and lead the organization&rsquo;s readiness for external and internal security audits,</li></ul>
including ISO 27001 certification audits.<ul><li>Build and run security awareness and phishing simulation programs and promote an</li></ul>
organization-wide culture of security accountability.<ul><li>Ensure ongoing compliance with local regulatory frameworks, including those issued by</li></ul>
CBE, FRA, and related bodies. 
Requirements<ul><li> 
At least 4 years of experience in GRC, information security risk management or security</li></ul>
compliance roles.<ul><li>Certifications: Relevant certifications such as CISSP, CISM, CRISC, or CISA are</li></ul>
preferred.<ul><li>Demonstrated experience with ISO 27001 implementation, security audits, and vendor</li></ul>
security risk assessments.<ul><li>Solid understanding of cloud architectures and security controls across AWS and</li></ul>
Google Cloud Platform (GCP).<ul><li>Familiarity with regulatory requirements in Egypt and international data protection</li></ul>
laws.<ul><li>University/college degree in a relevant professional field.</li><li>Excellent communication skills in English, both written and spoken.</li></ul></div>

Oman Arab Bank

<div>
 
 
 
 Purpose and Summary
 
 :
 
 
 <ul>
 <li>
 To primarily ensure Bank acts in accordance with its internal policies, external compliance requirements, and risk appetite through the alignment of strategy with organizational objectives.
 </li>
 <li>
 To ensure the operational environment remains secured, managing risk to acceptable level by analyzing risk probability, impact and prioritizing control implementation.
 </li>
 </ul>
 
 
 
 
 
 
 Key Deliverables:
 
 
 
 <ul>
 <li>
 Develop, implement, and maintain Information Security policies, standards, and frameworks in line with regulatory demands and new international standard practices.
 </li>
 <li>
 Overseeing Information Security compliance to ensure adherence to the bank&rsquo;s security policies and standards.
 </li>
 <li>
 Preparing MIS Trackers, Reports and Dashboards for the management.
 </li>
 <li>
 Perform Information security risk assessment against industry standard security framework/policies for IT/IS risks
 </li>
 <li>
 Document, Approve and Progress the Implementation of the Information Security Awareness Program Employees &amp; Customers.
 </li>
 <li>
 Develop and report on program execution KPIs to the ISWG (IS workgroup) on monthly, quarterly and annual basis.
 </li>
 <li>
 Maintain the CBO, SWIFT &amp; PCI-DSS compliance tracking. Produce the reports and dashboard. Ensure to share the report and dashboard with the ISWG (IS Workgroup) on monthly basis. Ensure timely closure, escalation of the action items and track / record activities in auditable format
 </li>
 <li>
 Report any violation to approved security policies and provide recommendations.
 </li>
 <li>
 Logs all InfoSec related Incidents and track for closure of the incidents and maintain risk register.
 </li>
 <li>
 Conduct research and gain awareness of latest information security trends.
 </li>
 <li>
 Liaise with different entities on security events or global threats.
 </li>
 <li>
 Liaise with different team members to deploy security controls recommended by vendors and by Information security team.
 </li>
 </ul>
 
 
 
 
 
 
 Qualifications
 
 :
 
 
 <ul>
 <li>
 Degree in Information Security/IT or equivalent.
 </li>
 <li>
 Preferred Professional Information Security Certification or equivalent.
 </li>
 <li>
 ITIL v3(Information Technology Information Library)
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 ISO/IEC 2013:27001 Lead Implementer
 </li>
 <li>
 CEH (Certified Ethical Hacking)
 </li>
 </ul>
 
 
 
 
 
 
 Skills/Knowledge
 
 :
 
 
 <ul>
 <li>
 Leadership Skills
 </li>
 <li>
 Effective Communication skills.
 </li>
 <li>
 Strong Risk Analysis skills.
 </li>
 <li>
 Attention to Details.
 </li>
 <li>
 Problem-Solving skills.
 </li>
 <li>
 Coordination skills.
 </li>
 <li>
 Teamwork skills.
 </li>
 <li>
 Reporting skills.
 </li>
 <li>
 Research skills
 </li>
 <li>
 Assessment skills.
 </li>
 <li>
 Sound Arabic &amp; English Languages skills.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Experience
 
 :
 
 
 <ul>
 <li>
 5 to 8 years of relevant experience.
 </li>
 </ul>
 
 
</div>

Senior Cyber Security GRC Analyst

Trufla Technology

<div>Think insurance is boring? Think again. Trufla is a multinational Canadian company and the first of its kind &ndash; we offer a complete suite of digital solutions for the modern insurance brokerage. From SEO and web design, to lead management, branded customer service and API&rsquo;s, Trufla provides a 360&deg; digital strategy for brokerages and reimagines the way their customers interact with insurance. Trufla is leading a digital revolution that will transform the insurance industry! We&rsquo;re growing fast, and we&rsquo;re looking for visionaries to join our team of innovators and disruptors at our Cairo offices. It&rsquo;s our goal for Trufla to be the BEST place to work. A great corporate culture is one of our top priorities. Main Benefits: 
<ul><li>
Competitive Salary</li><li>
Health Insurance</li><li>
Gym Membership</li><li>
Flexible Working Hours</li><li>
Continuing Education Opportunities</li><li>
Work from home</li><li>
Team Building Activities</li><li>
Milestone celebrations &ndash; work anniversaries, birthday celebrations, etc.</li></ul><h3 class="jobSectionHeader"> 
About the Role</h3> 
As Head of IT &amp; Security, you will serve as the senior leader of Trufla's Information Technology and Security function, working closely with our teams in Canada and Egypt. You will own the company's technology infrastructure and security posture end-to-end &mdash; driving strategy, implementation, and continuous improvement across all IT and cybersecurity domains.You will be responsible for addressing evolving and pervasive issues such as identity theft, data security breaches, data leakage, cyber intelligence, and system outages, with the goal of enabling secure and reliable operations across the organization. A core mandate of this role is leading Trufla's SOC 2 compliance program &mdash; from initial gap assessment through to certification and ongoing maintenance.You will apply deep security and infrastructure skills to design, build, and protect enterprise systems, applications, data, assets, and people, while also providing guidance to help clients protect their information, infrastructures, applications, and business processes against cyber threats.
 
<h3 class="jobSectionHeader">Responsibilities</h3> 

Leadership &amp; Strategy<ul><li>
Own and drive the IT and Security roadmap, aligning it with Trufla's business objectives</li><li>
Lead, mentor, and grow the IT &amp; Security team across Cairo and Canada offices</li><li>
Act as the primary point of escalation for all IT and security-related matters</li><li>
Report on IT and security program health, KPIs, and risk posture to senior leadership</li><li>
Manage vendor relationships, contracts, and procurement for IT and security tooling
</li></ul>SOC 2 Compliance<ul><li>
Lead the end-to-end implementation of SOC 2 (Type I and Type II) compliance across the organization</li><li>
Conduct gap assessments against SOC 2 Trust Service Criteria (Security, Availability, Confidentiality, Processing Integrity, and Privacy)</li><li>
Develop, document, and enforce the policies, procedures, and controls required to meet SOC 2 requirements</li><li>
Coordinate with external auditors and manage the audit process through to successful certification</li><li>
Maintain and continuously improve SOC 2 compliance posture post-certification, ensuring controls remain effective and audit-ready year over year</li><li>
Train and align internal stakeholders on their responsibilities within the SOC 2 control framework</li></ul> 

Security<ul><li>
Demonstrate a thorough understanding of business processes, risk management, IT controls, and related standards</li><li>
Identify and evaluate business and technology risks; design and implement appropriate controls, technologies, and processes to mitigate them</li><li>
Conduct and oversee capability assessments, developing pragmatic remediation strategies and good practice recommendations</li><li>
Lead the review of security-related events, assessing risk and validity, and producing clear executive reporting</li><li>
Conduct research to maintain and expand knowledge of the latest security technologies, standards, and the evolving threat and vulnerability landscape</li><li>
Work with security vendors to evaluate solution offerings and advise on appropriate technologies</li><li>
Conduct and oversee penetration testing activities</li><li>
Develop and deliver security awareness training programs across the organization</li></ul>
IT Support &amp; Operations<ul><li>
Oversee the analysis, diagnosis, and resolution of complex workstation and infrastructure problems for end users in Cairo and remotely for other offices</li><li>
Ensure the installation, configuration, testing, maintenance, monitoring, and troubleshooting of end-user workstations, hardware, software, and telephony equipment</li><li>
Manage and improve incident ticketing processes, ensuring timely response and resolution</li><li>
Oversee move, add, and change (MAC) requests as submitted by line managers</li><li>
Maintain and uphold procedures for logging, reporting, and statistically monitoring workstation operations</li><li>
Liaise with third-party support vendors and software/hardware providers as needed</li><li>
Participate in an on-call rotation for after-hours and weekend critical support</li></ul> 
 
<h3 class="jobSectionHeader">Job Qualifications</h3> 
<ul><li>
College diploma or university degree in Computer Science, Information Security, or a related field, or equivalent professional certification</li><li>
7+ years of experience in a Network, IT, or Security role</li><li>
3+ years of experience leading an IT or Security team</li><li>
Demonstrated hands-on experience implementing or managing SOC 2 compliance (Type I and/or Type II)</li><li>
Strong knowledge of security frameworks and standards (SOC 2, ISO 27001, NIST, CIS Controls)</li><li>
Sound technical knowledge of PC hardware, networking, mobile devices, and related technologies</li><li>
Working knowledge of current operating systems, protocols, and infrastructure standards</li><li>
Experience conducting penetration testing</li><li>
Able to read and understand technical manuals, procedural documentation, and OEM guides</li><li>
Experience working in a team-oriented, collaborative environment across multiple time zones</li></ul>
Personal Attributes<ul><li>
Strong leadership presence with the ability to influence at all levels of the organization</li><li>
Excellent written and oral communication skills in English</li><li>
Strong customer-service orientation with effective interpersonal and relationship-building skills</li><li>
Ability to present complex technical concepts in clear, business-friendly language</li><li>
Flexible and adaptable with proven problem-solving ability</li><li>
High degree of professionalism and integrity</li><li>
Demonstrated accountability and reliability in the quality and timeliness of work</li><li>
Self-motivated and directed, with the ability to effectively prioritize and execute in a high-pressure environment</li><li>
Critical thinker with strong attention to detail and a continuous improvement mindset</li></ul> 

Trufla is an equal opportunity employer and is committed to all forms of diversity in the workplace. All qualified individuals are encouraged to apply. 
Do you think we match? Apply Now! If you have what it takes, apply to the job through the &quot;Apply Now&quot; button above. *After applying, complete your application by taking the required assessment below:https://app.testgorilla.com/s/bhh62y7z</div>

Head of IT & Security

Search 10000+ Security compliance manager jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 security compliance manager jobs Near Me

Compliance Manager - Global Lab Environment

Manager – Information Security - Kuwait

Operations Engineer, Security

Cyber Security GRC Lead

Cyber Security GRC Lead

Senior Cyber Security GRC Analyst

Head of IT & Security