security governance manager

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
1. Ensure proper management of the Information Security Controls and Governance resources to support ongoing business initiatives from a security controls and governance perspectives, ensuring the development of the necessary security access matrix mapped to the staff&rsquo;s job titles and business activities.

2. Develop and Monitor the Information Security Controls and Governance Area&rsquo;s Key Performance Indicators and ensure adherence to the same. This includes monitoring of the TAT and SLAs of handling the different access management requests. In addition to the KPIs &amp; KRIs related to the Security Controls periodic reviews and assessments.

3. Ensure the annual review and update of the Information Security Controls and Governance area processes and procedures with the development and adherence to the developed SLAs.

4. Manage and oversee the implementation of the Data Classification &amp; Protection program to ensure proper classification framework is defined that helps classify and protect the bank&rsquo;s crown jewels and critical information assets. This includes maintaining the controls necessary to protect information and vital assets in accordance with security requirements and industry standards (privacy requirements, Personal Identifiable Information, encryption, Data Loss Prevention, data retention and destruction) for both structured and unstructured data.
5. Ensure proper timely tracking and closure of open (internal/External) audit issues.

6. Manage and oversee the Identity Access Management and Governance program to ensure proper governance of identities during the employment life cycle of all personnel in accordance with the security requirements and policies. including the development of the applications&rsquo; security matrix.

7. Manage and oversee the implementation of the Security Controls and Governance roadmap to ensure the planned reviews are conducted as per the predefined frequencies as well as the closure of the identified gaps in a timely manner, and ensure conducting access rights certification campaigns over the different bank systems to validate current access rights granted to employees, and ensure proper enforcements of actions identified as an outcome of the campaigns.

8. Handle and manage exceptions and escalations to ensure proper support and alignment is in place between Information Security Controls and Governance area and the different stakeholders. This includes resolving communication conflicts to ensure a streamlined process is in place.

9. Work collaboratively with Business units, IT teams, Audit, Legal and risk management functions to address open gaps/issues driven from internal/external audit, independent assessments and reviews as applicable, and ensure proper tracking mechanism is in place in coordination with the relevant stakeholders.

10. Ensure proper enforcement of the developed security policies and controls including Physical and Environmental Security policy, Human Resources Security Policy, Information Governance Policy. This in addition to the URL Filtering, Internet Access Policies as well as the Data Loss Prevention Policies.

11. Ensure adherence to the defined security controls operating model to support the different security controls requirements and communicate violations to the relevant teams. This includes managing the different security controls approvals including (Removable media access, Remote Working Access, Internet Access, External Email Access, EMM, etc..) ensuring adherence to the set SLAs and TAT.

12. Assess and take the necessary actions towards the different policies&rsquo; violations identified through the Privileged Access Management, Security Monitoring Tools such as NexThink, DLP or through the on-going SOC monitoring and reporting.<div> 
</div></div><div>
Qualifications<div></div> 
Qualifications &amp; Experience

 Bachelor&rsquo;s degree of Engineering, Computer Science, Information Security or equivalent.

 Minimum 8 - 10 years of experience in IT, Information Security, Risk Analysis and / or Governance and Compliance

 Recommended Certifications

o SANS Global Information Assurance Certification (GIAC)

o CRISC

o ISO 27001:2013 Lead implementer
o CISM

Skills

 Very good command of English and Arabic languages

 Very good Management and leadership skills
 Very good Negotiation skills

 Excellent Communication skills<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 3</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div><div>
Travel: No</div></div>

INFORMATION SECURITY CONTROLS & GOVERNANCE MANAGER

Arab Solutions

<div>
 
 Job Title:
 
 Cognitive AI Project Manager
 
 
 
 Job Description
 
 
 
 The Cognitive AI Project Manager is responsible for planning, coordinating, and delivering the Cognitive AI program of work within TASMU 2.0, ensuring multi-vendor teams deliver agreed scope, milestones, and acceptance outcomes on time and within governance. The role manages dependencies across platform foundations (multicloud, security, data, integration, observability), vendor build streams (inference, RAG/KB, fine-tuning, MCP, analytics), and operational readiness activities (SLOs, runbooks, ITSM/SIEM integration). The Project Manager drives program cadence, RAID management, stakeholder communications, and contractual deliverables, ensuring solutions are production-ready, compliant, and ready for adoption by TASMU customers.
 
 
 
 Duties And Responsibilities
 
 
 
 <ul>
 <li>
 Own end-to-end delivery plan: milestones, workstreams, resource plan, budget tracking, and integrated master schedule.
 </li>
 <li>
 Manage multi-vendor delivery execution: workstream coordination, dependency mapping, and delivery governance (weekly cadence, steering inputs).
 </li>
 <li>
 Maintain RAID (risks, assumptions, issues, dependencies) register and drive mitigation/closure with accountable owners.
 </li>
 <li>
 Ensure delivery aligns to TASMU architecture/security/data governance gates (design reviews, approvals, exception handling).
 </li>
 <li>
 Coordinate acceptance management: definition of completion criteria, evidence collection, test plans, and sign-off processes (KPIs/SLOs).
 </li>
 <li>
 Drive operational readiness: ITSM integration, monitoring/observability onboarding, SIEM logging, DR planning, and L1/L2/L3 handover.
 </li>
 <li>
 Manage change control: scope baseline, CR process, impact analysis, and stakeholder approvals.
 </li>
 <li>
 Run stakeholder communication: status reporting, executive summaries, action tracking, and escalation management.
 </li>
 <li>
 Coordinate vendor deliverables for documentation and enablement (IaC repos, runbooks, training materials, release notes).
 </li>
 <li>
 Support procurement/commercial governance: align delivery artefacts to contract schedules, SLAs, and service support obligations.
 
 
 </li>
 </ul>
 
 Skills &amp; Abilities
 
 
 
 <ul>
 <li>
 Strong project management capability in complex, multi-vendor technology programs with governance and contractual delivery. Ability to manage technical dependencies across cloud, AI, data, security, and operations workstreams.
 </li>
 <li>
 Skilled in planning, scheduling, and delivery control (critical path, earned progress, milestone tracking).
 </li>
 <li>
 Strong RAID, change management, and stakeholder communication skills, including executive-level reporting.
 </li>
 <li>
 Understanding of cloud-native delivery practices (agile + DevSecOps, IaC/GitOps, environments, release management).
 </li>
 <li>
 Ability to drive outcomes through influence and structured governance, not just task tracking.
 
 
 </li>
 </ul>
 
 Potential Background
 
 
 
 <ul>
 <li>
 7+ years in project/program management delivering enterprise platforms or cloud/data/AI initiatives.
 </li>
 <li>
 Demonstrated experience coordinating multiple SIs/vendors and managing acceptance criteria and contractual deliverables.
 </li>
 <li>
 Experience working in regulated environments (government, telco, critical infrastructure) with security/compliance gates.
 </li>
 <li>
 Familiarity with cloud landing zones, Kubernetes platforms, observability, and ITSM/SIEM integration is preferred.
 </li>
 <li>
 Experience with hybrid delivery methods (waterfall governance + agile execution) and release-to-production processes.
 </li>
 <li>
 Certifications preferred: PMP/PRINCE2, Agile/Scrum, ITIL awareness (optional).
 
 
 </li>
 </ul>
 Skills: scrum,budget tracking,devsecops,stakeholder,slas,itil awareness,iac/gitops,itsm/siem,cloud,cr process,data,ai initiatives,prince2,pmp,agile,raid
</div>

Cognitive AI Project Manager

Bank Alfalah Limited

<div>
 
 Job Purpose:
 
 
 The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 
 
 
 
 
 Responsibilities:
 
 <ul>
 <li>
 Support the execution of internal and external information security audits in collaboration with the Team lead.
 </li>
 <li>
 Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
 </li>
 <li>
 Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
 </li>
 <li>
 Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
 </li>
 <li>
 Maintain and oversee the information security risk register.
 </li>
 <li>
 Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
 </li>
 <li>
 Coordinate with IT/security teams for mitigation strategies.
 </li>
 <li>
 Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
 </li>
 <li>
 Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
 </li>
 <li>
 Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
 </li>
 <li>
 Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
 </li>
 <li>
 Oversee cyber security and information security (NESA Compliance) programs.
 </li>
 <li>
 Lead risk assessments and ensure compliance of vendors with security requirements
 </li>
 <li>
 Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
 </li>
 <li>
 Lead, and manage the IS GRC team in absence of Team Lead
 </li>
 <li>
 Manage risk acceptance process and ensure proper approval from the management
 </li>
 <li>
 Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
 </li>
 <li>
 Coordinate and manage regulatory inspections and ensure timely closure of observations
 </li>
 </ul>
 
 
</div>

Senior Manager Information Security

Qiddiya Investment Company

<div>The Assistant Manager &ndash; Cloud Operations is responsible for supporting the day-to-day operation, reliability, governance, security, and optimization of Azure and Google Cloud Platform (GCP) environments. The role works closely with infrastructure, security, application, service desk, vendors, managed service providers, and business stakeholders to ensure cloud services are stable, secure, resilient, cost-effective, and aligned with business requirements.
The role also supports Site Reliability Engineering (SRE) practices, including service availability, monitoring, incident response, reliability improvement, automation, and operational excellence. 
Requirements 
Key Responsibilities<ul><li>
Support daily cloud operations across Microsoft Azure and Google Cloud Platform (GCP).
</li><li>Monitor cloud infrastructure health, availability, performance, capacity, and incidents.
</li><li>Support SRE practices, including reliability monitoring, availability improvement, incident response, service health reviews, and operational automation.
</li><li>Manage incident response, service requests, escalations, and root cause analysis for cloud services.
</li><li>Support implementation and maintenance of cloud governance, policies, standards, tagging, and compliance controls.
</li><li>Review and optimize cloud cost, usage, reserved capacity, rightsizing, and resource cleanup.
</li><li>Coordinate with vendors, managed service providers, and internal teams to resolve operational issues.
</li><li>Support native backup, disaster recovery, high availability, and business continuity activities.
</li><li>Maintain cloud documentation, operational runbooks, architecture diagrams, and knowledge base articles.
</li><li>Support cloud security operations, including IAM reviews, network security, patching, vulnerability remediation, encryption, and access governance.
</li><li>Assist with automation and Infrastructure as Code adoption using tools such as Terraform.
</li><li>Track operational KPIs such as availability, incident resolution, SLA compliance, policy violations, cost optimization, reliability metrics, and documentation coverage.
</li><li>Participate in change management, release coordination, and operational readiness reviews.
</li><li>Support audits, compliance reviews, and risk remediation related to Azure and GCP cloud infrastructure.
</li></ul>Required Skills and Experience<ul><li>
Minimum 5 years of hands-on experience in cloud operations, cloud engineering, infrastructure operations, SRE, or related technical roles.
</li><li>Hands-on knowledge of Microsoft Azure and/or Google Cloud Platform (GCP).
</li><li>Understanding of cloud networking, identity, compute, storage, monitoring, backup, security, and high availability.
</li><li>Experience with incident, problem, change, and service request management.
</li><li>Familiarity with SRE concepts, including availability, reliability, monitoring, alerting, incident response, root cause analysis, and continuous improvement.
</li><li>Familiarity with ITIL processes and IT service management tools.
</li><li>Good understanding of cloud security, IAM, RBAC, network security groups/firewalls, encryption, vulnerability management, and compliance controls.
</li><li>Ability to work with vendors, managed service providers, and cross-functional teams.
</li><li>Strong troubleshooting, communication, documentation, and stakeholder coordination skills.
</li><li>Experience with automation or scripting using tools such as Terraform, PowerShell, or Python is preferred.</li></ul></div>

Assistant Manager - Cloud Operation

Qiddiya | القدية

<div>
 The Assistant Manager - Cloud Operations is responsible for supporting the day-to-day operation, reliability, governance, security, and optimization of Azure and Google Cloud Platform (GCP) environments. The role works closely with infrastructure, security, application, service desk, vendors, managed service providers, and business stakeholders to ensure cloud services are stable, secure, resilient, cost-effective, and aligned with business requirements.
 
 
 The role also supports Site Reliability Engineering (SRE) practices, including service availability, monitoring, incident response, reliability improvement, automation, and operational excellence.
 
 
 
 Requirements
 
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Support daily cloud operations across Microsoft Azure and Google Cloud Platform (GCP).
 </li>
 <li>
 Monitor cloud infrastructure health, availability, performance, capacity, and incidents.
 </li>
 <li>
 Support SRE practices, including reliability monitoring, availability improvement, incident response, service health reviews, and operational automation.
 </li>
 <li>
 Manage incident response, service requests, escalations, and root cause analysis for cloud services.
 </li>
 <li>
 Support implementation and maintenance of cloud governance, policies, standards, tagging, and compliance controls.
 </li>
 <li>
 Review and optimize cloud cost, usage, reserved capacity, rightsizing, and resource cleanup.
 </li>
 <li>
 Coordinate with vendors, managed service providers, and internal teams to resolve operational issues.
 </li>
 <li>
 Support native backup, disaster recovery, high availability, and business continuity activities.
 </li>
 <li>
 Maintain cloud documentation, operational runbooks, architecture diagrams, and knowledge base articles.
 </li>
 <li>
 Support cloud security operations, including IAM reviews, network security, patching, vulnerability remediation, encryption, and access governance.
 </li>
 <li>
 Assist with automation and Infrastructure as Code adoption using tools such as Terraform.
 </li>
 <li>
 Track operational KPIs such as availability, incident resolution, SLA compliance, policy violations, cost optimization, reliability metrics, and documentation coverage.
 </li>
 <li>
 Participate in change management, release coordination, and operational readiness reviews.
 </li>
 <li>
 Support audits, compliance reviews, and risk remediation related to Azure and GCP cloud infrastructure.
 
 
 </li>
 </ul>
 
 Required Skills And Experience
 
 
 
 <ul>
 <li>
 Minimum 5 years of hands-on experience in cloud operations, cloud engineering, infrastructure operations, SRE, or related technical roles.
 </li>
 <li>
 Hands-on knowledge of Microsoft Azure and/or Google Cloud Platform (GCP).
 </li>
 <li>
 Understanding of cloud networking, identity, compute, storage, monitoring, backup, security, and high availability.
 </li>
 <li>
 Experience with incident, problem, change, and service request management.
 </li>
 <li>
 Familiarity with SRE concepts, including availability, reliability, monitoring, alerting, incident response, root cause analysis, and continuous improvement.
 </li>
 <li>
 Familiarity with ITIL processes and IT service management tools.
 </li>
 <li>
 Good understanding of cloud security, IAM, RBAC, network security groups/firewalls, encryption, vulnerability management, and compliance controls.
 </li>
 <li>
 Ability to work with vendors, managed service providers, and cross-functional teams.
 </li>
 <li>
 Strong troubleshooting, communication, documentation, and stakeholder coordination skills.
 </li>
 <li>
 Experience with automation or scripting using tools such as Terraform, PowerShell, or Python is preferred.
 </li>
 </ul>
</div>

<div>Qiddiya Investment Company (QIC) is developing one of the region&rsquo;s most extensive and diverse asset portfolios, spanning residential communities, hospitality, retail, entertainment, sports, education, healthcare, and staff accommodation. Within this ecosystem, the Staff Accommodation portfolio plays a critical role in supporting Qiddiya&rsquo;s workforce and includes integrated residential, retail, leisure, and F&amp;B facilities. As the portfolio is expected to expand to approximately 13,000 residential units by 2030, robust and scalable facilities management leadership is crucial to ensure safe, efficient, compliant, and high‑quality living environments. 
The IT Manager &ndash; Staff Accommodation is responsible for end‑to‑end IT operational readiness, governance, and performance across the Staff Accommodation portfolio, ensuring reliable, secure, and resident‑centric digital services throughout mobilisation, launch, and steady‑state operations.
The role acts as the client‑side owner and integrator of all IT and digital systems supporting staff accommodation, ensuring alignment with QIC enterprise IT architecture, cybersecurity standards, and governance frameworks, while enabling a seamless digital experience for residents and operational teams.
Working in close coordination with QIC Corporate IT, Facilities Management, Security, and service partners, the IT Manager ensures that technology is operationally resilient, compliant, scalable, and fit for purpose in a 24/7 residential environment.
Key Responsibilities
1. Digital Infrastructure Readiness &amp; Mobilisation<ul><li>
Lead and coordinate IT operational readiness for staff accommodation assets across mobilisation, handover, and phased occupancy.</li><li>
Ensure digital infrastructure is fully commissioned, tested, and ready for day‑one operations, including networks, systems, and end‑user services.</li><li>
Align IT readiness plans with construction handovers, FM mobilisation, and resident onboarding schedules.</li></ul>
2. Network, Connectivity &amp; Systems Integration<ul><li>
Ensure network reliability, availability, and resilience across all accommodation buildings and communal facilities.</li><li>
Oversee Wi‑Fi coverage, performance, and user experience, ensuring full coverage, capacity, and service continuity in residential and common areas.</li><li>
Ensure full integration and operational alignment of:
</li><li><ul><li>Access control systems</li><li>
CCTV and security platforms</li><li>
IoT‑enabled FM devices and smart systems</li></ul></li><li>
Confirm all systems comply with QIC IT architecture, cybersecurity standards, and data protection requirements.</li></ul>
3. IT Governance, Security &amp; Compliance<ul><li>
Enforce IT governance across staff accommodation operations, ensuring strict adherence to:
</li><li><ul><li>QIC group IT policies and standards</li><li>
Cybersecurity and data protection requirements</li><li>
Device management and access control protocols</li></ul></li><li>
Act as the first line of control to ensure no non‑compliant systems, networks, or applications are introduced into the environment.</li><li>
Coordinate with Corporate IT and Security teams on audits, risk assessments, and incident response.</li></ul>
4. Technology Performance &amp; Readiness Reporting<ul><li>
Establish and maintain technology readiness and performance reporting, including:
</li><li><ul><li>Network and system uptime</li><li>
Incident volumes and response times</li><li>
Cybersecurity risks and vulnerabilities</li><li>
Service availability and resilience indicators</li></ul></li><li>
Develop and maintain clear dashboards to provide visibility of IT health, risks, and trends to FM and senior stakeholders.</li><li>
Proactively identify technology risks and escalate issues before they impact residents or operations.</li></ul>
5. Resident Digital Experience &amp; Enablement<ul><li>
Elevate the resident digital experience by ensuring seamless and intuitive access to:
</li><li><ul><li>Wi‑Fi and connectivity services</li><li>
Resident mobile applications and portals</li><li>
Digital self‑service tools</li><li>
Integrated helpdesk and service request platforms</li></ul></li><li>
Ensure digital services are reliable, user‑friendly, and aligned with resident expectations in a live‑in environment.</li><li>
Support resident onboarding and communications related to IT services and digital tools.</li></ul>
6. IT Operations, Helpdesk &amp; Incident Management<ul><li>
Oversee IT operational support models, including helpdesk integration, incident management, and escalation workflows.</li><li>
Ensure incidents are logged, tracked, resolved, and reported in line with agreed SLAs and governance requirements.</li><li>
Review incident trends and root causes to drive continuous improvement and service stability.</li></ul>
7. Vendor &amp; Service Provider Management<ul><li>
Manage and govern IT vendors, system integrators, and service providers supporting staff accommodation.</li><li>
Ensure vendor performance aligns with contractual obligations, SLAs, security requirements, and QIC standards.</li><li>
Support procurement, technical evaluations, and onboarding of IT service partners as required.</li></ul>
8. Steady‑State Operations &amp; Continuous Improvement<ul><li>
Maintain stable, secure, and high‑performing IT operations in steady state.</li><li>
Identify opportunities for technology optimisation, resilience improvements, and cost efficiency.</li></ul>
Support scalability of digital services to accommodate future phases, increased occupancy, and evolving resident needs. 
Requirements 
Qualifications &amp; Competencies
Bachelor&rsquo;s degree in information technology, Computer Engineering, Information Systems, or relevant experience
Demonstrated proficiency in:<ul><li>IT operations and service governance
</li><li>Network and systems reliability in live environments
</li><li>Cybersecurity awareness and compliance enforcement
</li><li>Cross‑functional coordination and stakeholder management</li></ul>
Experience supporting large‑scale, always‑on, or residential / hospitality environments.
Experience managing outsourced IT service providers and vendor SLAs.
Exposure to smart buildings, IoT, or FM‑integrated systems is desirable.
High level of communication and reporting capability.
Strong operational judgement, ownership mindset, and ability to manage technology risk in residential settings.
GCC / Saudi experience and working knowledge of local compliance frameworks is a strong advantage.
Professional Certifications
IT service management certification (e.g. ITIL, or equivalent) &ndash; desirable.
Network or infrastructure certification (e.g. Cisco, Microsoft, cloud platforms) &ndash; advantageous.
Cybersecurity or information security certification (e.g. ISO 27001 awareness, CISSP, CISM) &ndash; desirable.
(Certifications are preferred but not mandatory and may be substituted by relevant experience.)
Years of Experience
8 plus years of experience in IT operations, infrastructure management, or enterprise IT environments.
Application closes on 14 May 2026</div>

Information Technology Manager - 008 - HB4

The Home Depot

<div><div>Position Purpose:
The Senior Cybersecurity Engineer &ndash; Non‑Human Identity (NHI) partners with Architecture, IAM, cloud, platform, DevOps, and application teams to design, build, and operate enterprise‑scale discovery, governance, and lifecycle automation for non‑human identities (NHIs). NHIs include service accounts, API tokens, cloud IAM roles, automation identities, CI/CD identities, and AI agents across on‑premises, hybrid, and multi‑cloud environments. This role focuses on automation, collaboration, and risk reduction, helping modernize authentication patterns and reduce reliance on long‑lived credentials. 
Key Responsibilities:<ul><li>
100% Deliver Execution, Plans &amp; Align, Problem Solving - Design automation workflows and capabilities in support of data collection, investigation and incident response Develop threat hunting and data analysis strategy and capabilities Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity Utilize indicators to scope and respond proactively to emerging threats Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management</li></ul> 
Direct Manager/Direct Reports:<ul><li>
This Position typically reports to Manager or Sr. Manager</li><li>
This Position has 0 Direct Reports</li></ul> 
Travel Requirements:<ul><li>
No travel required.</li></ul> 
Physical Requirements:<ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul> 
Working Conditions:<ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul> 
Minimum Qualifications:<ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul> 
Preferred Qualifications:
Non‑Human Identity Discovery &amp; Automation<ul><li>
Work with IAM, Architecture, and platform teams to design and operate automated discovery capabilities for NHIs across servers, applications, cloud platforms, and CI/CD pipelines</li><li>
Contribute to development of automation and tooling (Python, PowerShell) to:<ul><li>
Discover NHIs across infrastructure and environments</li><li>
Parse configuration files, logs, APIs, and Infrastructure‑as‑Code to identify embedded or hard‑coded credentials</li><li>
Enrich NHI metadata including ownership, purpose, environment, and lifecycle state</li></ul></li><li>
Partner with engineering teams to automate NHI hygiene activities such as ownership validation, lifecycle tracking, and reporting</li></ul>
NHI Lifecycle &amp; Governance<ul><li>
Collaborate with IAM, Architecture, cloud, and ITSM teams to design and integrate NHI lifecycle workflows, including onboarding, access reviews, credential rotation, and decommissioning</li><li>
Integrate NHI workflows with enterprise platforms, including: IAM and PAM solutions, Cloud IAM services, Secrets management platforms, ITSM and workflow tools</li><li>
Support enforcement of clear ownership, purpose, and lifecycle accountability for NHIs</li><li>
Assist with enterprise access reviews, attestations, and audit evidence generation</li></ul>
Partner with application, platform, and DevOps teams to analyze authentication flows and refactor legacy patterns toward modern, password‑less NHI designs, including managed identities, OAuth client credentials, and short‑lived tokens.<ul><li>
Provide NHI context to security monitoring and incident response teams to support investigations involving service account misuse, anomalous automation behavior, or credential compromise</li><li>
Apply data‑driven techniques such as pattern recognition, baselining, and anomaly indicators to analyze NHI usage trends and detect drift or misuse.</li></ul>
AI Agent Identity Governance<ul><li>
Partner with architecture and platform teams to support onboarding and governance of AI agents as non‑human identities</li><li>
Help ensure AI agents have clearly defined ownership, scoped access, and documented lifecycle expectations</li></ul>
Basic PKI Responsibilities (Foundational)<ul><li>
Support certificate‑based NHIs (e.g., TLS, mTLS, client authentication) as part of broader NHI governance</li><li>
Integrate NHI discovery and lifecycle workflows with enterprise PKI and certificate management platforms</li><li>
Ensure certificates and private keys follow approved standards for issuance, rotation, and expiration, without direct ownership of PKI infrastructure</li><li>
Collaborate across security, cloud, and platform engineering teams to align NHI controls with Zero Trust principles and THD security standards.</li><li>
Produce and maintain technical documentation, runbooks, and onboarding guides, and support audit and compliance activities through NHI evidence and reporting.</li><li>
Continuously improve the NHI program by identifying automation opportunities, reducing operational toil, and improving accuracy, coverage, and maturity of non‑human identity controls.</li></ul> 
Minimum Education:<ul><li>
The knowledge, skills and abilities typically acquired through the completion of a high school diploma and/or GED.</li></ul> 
Preferred Education:<ul><li>
No additional education</li></ul> 
Minimum Years of Work Experience:<ul><li>
3</li></ul> 
Preferred Years of Work Experience:<ul><li>
No additional years of experience</li></ul> 
Minimum Leadership Experience:<ul><li>
None</li></ul> 
Preferred Leadership Experience:<ul><li>
None</li></ul> 
Certifications:<ul><li>
None</li></ul> 
Competencies:<ul><li>
Action Oriented</li><li>
Collaborates</li><li>
Communicates Effectively</li><li>
Customer Focus</li><li>
Drives Results</li></ul></div> 
Apply End Date: 05/19/2026</div>

Cybersecurity Senior Engineer - Non Human Identity (Remote)

Search 10000+ Security governance manager jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 security governance manager jobs Near Me

INFORMATION SECURITY CONTROLS & GOVERNANCE MANAGER

Cognitive AI Project Manager

Senior Manager Information Security

Assistant Manager - Cloud Operation

Assistant Manager - Cloud Operation

Information Technology Manager - 008 - HB4

Cybersecurity Senior Engineer - Non Human Identity (Remote)