security risk manager

Systems Limited

<div>
 
 The
 
 Information Security Risk Management &amp; Reporting Manager
 
 supports the development and execution of the bank&rsquo;s information security risk management strategy. The role ensures cyber and information security risks are effectively identified, assessed, monitored, and reported in alignment with enterprise risk frameworks and business objectives. The position also drives automation and optimization of security risk processes through Governance, Risk, and Compliance (GRC) platforms, enabling centralized risk visibility, streamlined reporting, and stronger governance across the organization.
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Define and manage the
 
 information security risk lifecycle
 
 in alignment with Enterprise Risk Management (ERM) and Operational Risk Management (ORM) frameworks.
 </li>
 <li>
 Support business and technology teams in
 
 risk-based decision making
 
 related to cyber and information security.
 </li>
 <li>
 Develop and implement
 
 risk appetite and risk management frameworks
 
 in collaboration with ERM and ORM teams.
 </li>
 <li>
 Ensure
 
 information security exceptions
 
 are documented, assessed, approved by risk owners, and tracked until closure.
 </li>
 <li>
 Identify, assess, and monitor
 
 cyber risks
 
 , ensuring effective documentation, reporting, and remediation tracking.
 </li>
 <li>
 Conduct
 
 cyber risk quantification
 
 to evaluate potential business impact using qualitative or quantitative methods.
 </li>
 <li>
 Develop and maintain a
 
 centralized cyber risk register
 
 to track risk status, remediation progress, and emerging threats.
 </li>
 <li>
 Promote adoption of
 
 cybersecurity best practices
 
 across teams and business units.
 </li>
 <li>
 Act as the
 
 business owner of the Information Security GRC platform
 
 , ensuring its effective use for governance, risk, and compliance activities.
 </li>
 <li>
 Enable
 
 automation of information security processes
 
 through GRC solutions, including dashboards, risk registers, and reporting capabilities.
 </li>
 <li>
 Manage relationships with
 
 GRC solution vendors
 
 , including requirements, licensing, contracts, and renewals.
 </li>
 <li>
 Ensure GRC tools are
 
 configured and integrated
 
 to meet the organization&rsquo;s risk, compliance, and audit requirements.
 </li>
 <li>
 Monitor
 
 GRC platform performance
 
 , resolve issues, and ensure continuous system availability and usability.
 </li>
 <li>
 Develop
 
 training and guidance
 
 to support GRC platform adoption across the organization.
 </li>
 <li>
 Support
 
 CISOs and information security teams
 
 in regulatory audits, assessments, and reporting.
 </li>
 <li>
 Manage
 
 GRC Run-the-Bank and Change-the-Bank initiatives
 
 , ensuring timely delivery and proactive risk escalation.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 
 10+ years of experience
 
 in Information Security or Cyber Security, including
 
 2&ndash;3 years managing GRC platforms or similar governance roles
 
 .
 </li>
 <li>
 Strong experience in
 
 information security governance, risk management, compliance, and cyber risk frameworks
 
 .
 </li>
 <li>
 Hands-on experience with
 
 GRC platforms
 
 such as RSA Archer, MetricStream, or similar solutions.
 </li>
 <li>
 Strong understanding of
 
 banking security frameworks and standards
 
 such as ISO 27001, NIST 800 series, PCI-DSS, SWIFT CSP, and COBIT.
 </li>
 <li>
 Experience in
 
 risk assessments, cyber risk quantification, and risk reporting
 
 in enterprise environments.
 </li>
 <li>
 Ability to interpret
 
 regulatory requirements
 
 and translate them into security controls and risk mitigation strategies.
 </li>
 <li>
 Strong
 
 analytical, stakeholder management, and communication skills
 
 , with experience working with senior leadership.
 </li>
 <li>
 Experience managing
 
 enterprise security initiatives and cross-functional projects
 
 .
 </li>
 <li>
 
 Master&rsquo;s degree
 
 in Information Technology, Information Security, or a related field.
 </li>
 <li>
 Professional certifications such as
 
 CISA, CISM, CISSP, CRISC, or ISO 27001 LA/LI
 
 preferred.
 </li>
 </ul>
 
 
</div>

Information Security Risk & Reporting Manager

ibex

<div>
 
 To protect IBEX infrastructure from emerging threats and help organization in achieving business objectives. This position acts as senior level IS resource having strong background of Network and Cyber Security functions. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets.
 
 
 
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 
 
 
 
 
 
 A. Information Security Risk Management &amp; Assessments (Hands-On)
 
 
 <ul>
 <li>
 Lead and perform end-to-end IT Risk Assessments, including inherent risk identification, control design and evaluation of operating effectiveness, residual risk rating and risk treatment recommendations.
 </li>
 <li>
 Assess risks across Infrastructure (on-prem, cloud, hybrid), Applications and Systems, data security and privacy, identity and access management, change and configuration management etc.
 </li>
 <li>
 Develop and maintain risk registers, risk heatmaps, and executive-level risk reporting.
 </li>
 <li>
 Support internal and external audits by providing risk documentation and remediation evidence.
 </li>
 </ul>
 
 
 
 
 
 B. Supply Chain &amp; Third-Party Risk Management
 
 
 <ul>
 <li>
 Conduct Supply Chain / Third-Party IT Risk Assessments for vendors, partners, and service providers.
 </li>
 <li>
 Evaluate vendor risks related to Information Security, Data Protection &amp; Privacy, Business Continuity and resilience, sub-contractor and fourth party risks.
 </li>
 <li>
 Review and assess Vendor security questionnaires, independent audit reports such as SOC2, ISO 27001, PCI DSS, Penetration Test Summaries, ISO 42001 for AI Service Providers etc.
 </li>
 <li>
 Collaborate with Procurement, Legal, and Compliance teams to define risk-based onboarding criteria, support contract security clauses, track vendor risk remediation activities etc.
 </li>
 </ul>
 
 
 
 
 
 C. AI Risk Assessments &amp; AI System Impact Assessments
 
 
 <ul>
 <li>
 Lead and perform AI Risk Assessments across AI/ML systems, including but not limited to model risks, data quality and bias risks, security and adversarial risks, privacy and data protection risks, ethical and responsible AI risks etc.
 </li>
 <li>
 Conduct AI System Impact Assessments (AISIAs) to evaluate impact on individuals and customers, regulatory and compliance implications, business and reputational risks etc.
 </li>
 <li>
 Align AI risk activities with relevant frameworks and regulations, such as ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework, Applicable data protection and AI regulations etc.
 </li>
 <li>
 Partner with AI, Data Science, Legal, and Product teams to embed risk controls into AI system lifecycles.
 </li>
 </ul>
 
 
 
 
 
 D. Team Leadership &amp; Management
 
 
 <ul>
 <li>
 Manage, coach, and mentor team members.
 </li>
 <li>
 Review and approve risk assessment deliverables to ensure quality and consistency.
 </li>
 <li>
 Allocate work, set priorities, and track progress against agreed timelines.
 </li>
 <li>
 Provide performance feedback, skill development guidance, and technical direction.
 </li>
 <li>
 Promote standardization of risk assessment methodologies, templates, and reporting.
 </li>
 </ul>
 
 
 
 
 
 E. Stakeholder Engagement &amp; Reporting
 
 
 <ul>
 <li>
 Act as a trusted risk advisor to technology, business, and senior leadership stakeholders.
 </li>
 <li>
 Present risk findings and recommendations to IT leadership, Risk committee, Senior management etc.
 </li>
 <li>
 Support the development of risk policies, standards, and procedures.
 </li>
 <li>
 Drive a culture of risk awareness and accountability across the organization.
 </li>
 </ul>
 <li>
 </li>
 
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 Bachelors/Masters Degree in IT/CS/Software Eng./Telecom
 
 
 
 
 
 
 Experience
 
 8 - 12 years
 
 
 
 
 
 
 
 
 Required Skills
 
 
 
 
 
 <ul>
 <li>
 5+ years of hands-on experience in IT/Information Security Risk Management
 </li>
 <li>
 Strong understanding of ITRM concepts, methodologies, controls and architectures.
 </li>
 <li>
 Cloud. Hands-on experience with Third-Party/Supply Chain Risk Assessments
 </li>
 <li>
 Knowledge of risk frameworks such as ISO 27005, NIST CSF etc.
 </li>
 <li>
 Strong presentation and communication skills
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 <ul>
 <li>
 Reporting Time: 5pm to 2am (PKST)
 </li>
 </ul>
 
 
</div>

Principal IT Security - (GRC)

Concentrix

<div>
 
 Job Title
 
 
 
 Specialist I, Governance, Risk and Compliance
 
 
 We're Concentrix. The intelligent transformation partner. Solution-focused. Tech-powered. Intelligence-fueled.
 
 
 The global technology and services leader that powers the world&rsquo;s best brands, today and into the future. We&rsquo;re solution-focused, tech-powered, intelligence-fueled. With unique data and insights, deep industry expertise, and advanced technology solutions, we&rsquo;re the intelligent transformation partner that powers a world that works, helping companies become refreshingly simple to work, interact, and transact with. We shape new game-changing careers in over 70 countries, attracting the best talent.
 
 
 In our Information Technology and Global Security team, you will deliver the latest technology infrastructure, transformative software solutions and industry-leading global security for our staff and clients. You will work with the best in the world to design, implement and strategize IT, security, application development, innovation, and solutions in today&rsquo;s hyperconnected world. You will be part of the technology team that is core to our vision of develop, build and run the future of Integrated Services.
 
 
 Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we&rsquo;re proud to be recognized with awards such as "World's Best Workplaces," &ldquo;Best Companies for Career Growth,&rdquo; and &ldquo;Best Company Culture,&rdquo; year after year.
 
 
 We embrace our game-changers with open arms, people from diverse backgrounds, who are curious and willing to learn. Your natural talent to help others and go beyond WOW for our customers will fit right in with what we do and who we are.
 
 
 Join us and be part of this journey towards greater opportunities and brighter futures.
 
 
 
 Role Description
 
 
 
 We are seeking a professional with
 
 3&ndash;5 years of experience
 
 in Information Security Risk Management to support global business operations and third-party engagements. This role involves driving risk management activities, conducting assessments, supporting audits, and ensuring compliance with contractual, regulatory, and company standards.
 
 
 The ideal candidate will balance technical expertise with business acumen, think creatively to solve problems, and build strong relationships across teams while maintaining a proactive, &ldquo;ready-to-act&rdquo; attitude.
 
 
 <ul>
 <li>
 Responsibilities:
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead and manage Information Security Risk Management activities across internal business units and third parties.
 </li>
 <li>
 Maintain and continuously improve Concentrix&rsquo;s risk management frameworks.
 </li>
 <li>
 Conduct and support risk assessments for business teams and external partners.
 </li>
 <li>
 Deliver training and awareness programs on risk management practices.
 </li>
 <li>
 Interpret contractual and regulatory requirements to align with risk management strategies.
 </li>
 <li>
 Develop and maintain documentation, policies, and procedures related to risk management.
 </li>
 <li>
 Support and manage both internal and external risks.
 </li>
 <li>
 Respond to client audits, reviews, and assessments with timely and structured methodologies.
 </li>
 <li>
 Communicate risks, vulnerabilities, and findings effectively to senior management and stakeholders, ensuring closure and governance of identified issues.
 </li>
 <li>
 Complete all assigned, mandatory training within the timeframe provided
 </li>
 <li>
 Conduct and/or participate in regularly scheduled 1:1 meetings with direct manager and/or direct reports
 
 
 </li>
 </ul>
 
 Accountability
 
 
 
 <ul>
 <li>
 Drive risk management activities at the location level and across global engagements.
 </li>
 <li>
 Ensure frameworks and processes remain aligned with business, regulatory, and contractual obligations.
 </li>
 <li>
 Act as a key liaison between business teams, support teams, and external stakeholders during audits and assessments.
 </li>
 <li>
 Provide clear reporting and tactical influence to leadership regarding risk exposure and mitigation.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 Education: Bachelor&rsquo;s degree (preferred, ideally in Computer Science, Information Security, Risk Management, or related field).
 </li>
 <li>
 Experience: 3&ndash;5 years of hands-on experience in security, privacy, and compliance risk management.
 </li>
 <li>
 Certifications (preferred): CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, or other professional security/privacy credentials.
 
 
 </li>
 </ul>
 
 Candidate Profile
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills with the ability to balance risk vs. business opportunity.
 </li>
 <li>
 Excellent communication and stakeholder management skills.
 </li>
 <li>
 Collaborative team player with a proactive, adaptable mindset.
 </li>
 <li>
 Detail-oriented, organized, and able to manage multiple priorities under pressure.
 </li>
 </ul>
</div>

Specialist I, Governance, Risk and Compliance

Contract Resources Group

Position Title: Security + ERW Specialist Organization: Ten X Group Work Arrangement: Full-time or project-based annual contract, subject to assignment Location: Syria - as assigned, including high-risk and restricted-access environments Reports To: Program Director / Security Manager / Authorized Project ExecutivePosition SummaryThe Security + ERW Specialist is responsible for security risk assessment, site access risk management, security planning, explosive remnants of war risk integration, contractor security controls, and implementation support for infrastructure and field programs operating in complex environments. The role requires strong operational judgment and the ability to integrate security and ERW constraints into engineering, logistics, mobilization, contractor management, and project sequencing.This position is intended for a senior practitioner with credible field and planning experience in high-risk environments and a disciplined understanding of security management, route/site access controls, incident protocols, and ERW-related operating constraints.Key Duties and Responsibilities&middot; Lead security risk assessments for project sites, facilities, routes, logistics corridors, and field operations.&middot; Develop and maintain Security Management Plans, access protocols, escalation procedures, and incident reporting frameworks.&middot; Integrate ERW risk considerations into site readiness, mobilization logic, contractor planning, and field implementation sequencing.&middot; Coordinate with relevant clearance, access, or security stakeholders to establish safe access preconditions and no-go thresholds.&middot; Draft security clauses, code-of-conduct requirements, incident notification requirements, and contractor security obligations for procurement and contract packages.&middot; Review security staffing, procedures, movement controls, escort requirements, communications plans, and emergency response arrangements.&middot; Support field teams in risk briefings, access approvals, movement planning, and incident preparedness.&middot; Participate in audits, incident investigations, corrective action reviews, and compliance monitoring.&middot; Maintain security logs, threat updates, risk registers, and action trackers.&middot; Advise management on risk exposure, operational feasibility, and mitigation priorities.Minimum Required Education&middot; Bachelor&rsquo;s degree in Security Management, Risk Management, International Relations, Emergency Management, Engineering, or related field preferred. Equivalent military, police, EOD, mine action, or high-risk field experience may be accepted in lieu of degree where appropriate.Preferred Education&middot; Master&rsquo;s degree in Security Studies, Risk, Emergency Management, Conflict Studies, or related field is advantageous.Minimum Required Experience&middot; Minimum 8 years of directly relevant security, risk, field operations, or access management experience.&middot; Minimum 5 years in high-risk, fragile, post-conflict, or restricted-access environments.&middot; Demonstrated experience integrating security controls into infrastructure, engineering, humanitarian, stabilization, or field-delivery programs.Required Technical Experience&middot; Security risk assessment&middot; Security planning and implementation&middot; Incident response and escalation&middot; Field access control&middot; High-risk movement planning&middot; Security contractor oversight&middot; ERW / UXO / mine-risk operational integration&middot; Security reporting and audit controls&middot; Emergency procedures and communications disciplineRequired Certifications / Licenses&middot; Valid driver&rsquo;s license and ability to travel and deploy as required.&middot; Recognized security or risk management training is strongly preferred.Preferred Certifications&middot; ASIS CPP, PSP, PCI, or equivalent&middot; HEAT / hostile environment training&middot; ERW, EOD, mine action, or unexploded ordnance awareness training&middot; Incident command, emergency response, or crisis management certification&middot; NEBOSH or equivalent HSE certification is advantageousCore Competencies&middot; Risk-based judgment&middot; Field credibility&middot; Operational discipline&middot; Security planning&middot; Incident management&middot; Calm decision-making&middot; Reporting rigor&middot; Stakeholder coordination&middot; Access control logicJob Types: Full-time, Contract Contract length: 12 monthsAbility to commute/relocate:<ul><li>Dubai: Reliably commute or willing to relocate with an employer-provided relocation package (Required)</li></ul>Education:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>security, risk, field operations: 8 years (Required)</li><li>high-risk, fragile, post-conflict zones: 8 years (Required)</li></ul>License/Certification:<ul><li>ASIS CPP, PSP, PCI (Required)</li><li>HEAT / hostile environment training (Required)</li><li>ERW, EOD, mine action (Required)</li><li>NEBOSH or equivalent HSE cert (Required)</li></ul>Location:<ul><li>Dubai (Preferred)</li></ul>Willingness to travel:<ul><li>75% (Required)</li></ul>Work Location: In person

Security + ERW Specialist

Mobilink Bank

<div>
 
 
 Job Title:
 
 Assistant Manager IS GRC
 
 
 
 Department:
 
 Information Security
 
 
 
 Grade:
 
 OG-I
 
 
 
 Reports to:
 
 Manager GRC
 
 
 
 
 
 
 About the Role:
 
 
 
 The role is responsible for supporting the organization&rsquo;s Information Security Governance, Risk, and Compliance (GRC) function to ensure compliance with regulatory, contractual, and internal security requirements.
 
 
 
 
 
 
 Job Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Support implementation, maintenance, and continuous improvement of the
 
 Information Security Management System (ISMS)
 
 in line with
 
 ISO/IEC 27001
 
 requirements.
 </li>
 <li>
 Assist in
 
 risk assessments
 
 , risk treatment plans, and maintenance of the
 
 Information Security Risk Register
 
 .
 </li>
 <li>
 Support compliance with
 
 State Bank of Pakistan (SBP)
 
 Cyber Security Framework, policies, and regulatory directives.
 </li>
 <li>
 Assist in
 
 PCI DSS
 
 , SOX, ITGC and other regulatory or audit-related activities, including evidence collection and tracking of remediation actions.
 </li>
 <li>
 Coordinate internal and external
 
 security audits
 
 , regulatory inspections, and management reviews.
 </li>
 <li>
 Support
 
 third-party / vendor risk management
 
 , including security due diligence, risk assessments, and onboarding/offboarding reviews.
 </li>
 <li>
 Assist in reviewing and updating
 
 information security policies, standards, procedures, and SOPs
 
 .
 </li>
 <li>
 Participate in
 
 security awareness and phishing simulation programs
 
 , including reporting and metrics.
 </li>
 <li>
 Maintain compliance documentation, dashboards, KPIs, KRIs, and management reporting.
 </li>
 <li>
 Coordinate with IT, SOC, application teams, and business units on GRC-related requirements and observations.
 </li>
 <li>
 Perform any other GRC-related tasks assigned by the Manager GRC.
 </li>
 </ul>
 
 
 
 
 
 Job Requirements:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, IT, or a related discipline with 5+ years of relevant cybersecurity governance experience, preferably in a banking industry.
 </li>
 <li>
 Exposure to regulatory audits, ISO 27001, SBP requirements, or PCI DSS is highly desirable.
 </li>
 <li>
 Relevant certifications ISO 27001 (LI/LA), CISA are preferred.
 </li>
 <li>
 Proven knowledge of SBP cybersecurity regulations, guidelines, and compliance requirements.
 </li>
 <li>
 Ability to manage and track cybersecurity action plans, risk registers, and remediation activities.
 </li>
 <li>
 Strong analytical, documentation, and communication skills to engage with technical teams, auditors, and senior management.
 </li>
 <li>
 Ability to work independently on critical and time-sensitive tasks based on management direction.
 </li>
 <li>
 Statements in this document are intended to reflect, in general, the role and responsibilities of the position, but are not to be interpreted as totally inclusive.
 </li>
 </ul>
 
 
 
 
 
 About MMBL:
 
 
 
 
 
 
 Mobilink Microfinance Bank Ltd. is providing banking services to over 48 million registered users including 20+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 114 branches and 270,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan instalments), mobile wallets, insurance, G2P, B2B &amp; B2P payments; thus, playing a leading role in the promotion of financial inclusion. MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
 
 
 
 
 
 
 Why Join MMBL?
 
 
 
 
 
 
 This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.
 
 
 
</div>

Assistant Manager IS GRC

Deloitte

<div><div><div>Location
</div>Cairo, Egypt Delivery Center
</div><div><div><div>Risk Officer &ndash; Information Security, Cairo, Egypt
Connect to your career at Deloitte
Deloitte, established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
Connect to your opportunity
Deloitte is seeking a skilled Risk Officer specializing in Information Security to support the Risk Leader in developing, maintaining, and enhancing the organization&rsquo;s risk management framework, with a focus on information security risks. The Risk Officer will play a vital role in identifying, assessing, and mitigating risks to safeguard DIH&rsquo;s information assets and ensure compliance with relevant security standards.
Key Responsibilities<ul>
<li>Maintain and update risk management documentation related to information security, ensuring accuracy and relevance.
</li><li>Conduct regular risk assessments to identify threats and vulnerabilities affecting DIH, supporting risk owners in managing the Business Priority Risk Register.
</li><li>Review compliance with information security policies such as data classification and clear desk policies, identifying gaps and recommending corrective actions.
</li><li>Deliver training and awareness programs to staff to promote a strong risk-aware culture, and support ongoing communication through newsletters and other channels.
</li><li>Monitor and report on the performance of the information security risk management framework against established KPIs, providing updates to the Risk Leader.
</li><li>Facilitate management reviews of information security risks and controls.
</li><li>Coordinate vulnerability assessments and penetration testing activities, ensuring findings are tracked and remediated.
</li><li>Act as a key contact for security incident response planning and execution, supporting investigations and recommending corrective measures as needed.</li>
</ul>Connect to your skills and professional experience
Skills and Competencies<ul>
<li>Business Acumen: Ability to translate technical security risks into business impact and communicate effectively with both technical and non-technical stakeholders.
</li><li>Communication: Skilled in presenting risk assessments and control effectiveness clearly and persuasively.
</li><li>Relationship Management: Proven ability to build collaborative relationships with business leaders, IT and other teams, and external partners.
</li><li>Conflict Management: Experience in recognising and managing conflicts related to risk and security issues.
</li><li>Interpersonal Skills: Strong ability to work constructively with diverse teams to foster a risk-aware culture.</li>
</ul>Qualifications &amp; Experience<ul>
<li>Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or a related discipline.
</li><li>7+ years&rsquo; experience in information security, risk management, or related fields.
</li><li>Experience managing information security and privacy risks within large organisations.
</li><li>Relevant certifications such as Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP) are required.
</li><li>ISO 27001 Lead Implementer and/or ISO 27701 Lead Implementer certification is highly desirable.</li>
</ul>Connect to your team &ndash; Technology &amp; Transformation
Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
Personal independence
Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your &quot;Immediate Family Members&quot; are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
Connect to your Industry
&ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
Our commitment to you
Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
Connect to your next step
A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.</div></div></div></div>

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt

<div>
 
 Risk Officer &ndash; Information Security
 
 
 , Cairo, Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 , established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity
 
 
 
 Deloitte is seeking a skilled Risk Officer specializing in Information Security to support the Risk Leader in developing, maintaining, and enhancing the organization&rsquo;s risk management framework, with a focus on information security risks. The Risk Officer will play a vital role in identifying, assessing, and mitigating risks to safeguard DIH&rsquo;s information assets and ensure compliance with relevant security standards.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Maintain and update risk management documentation related to information security, ensuring accuracy and relevance.
 </li>
 <li>
 Conduct regular risk assessments to identify threats and vulnerabilities affecting DIH, supporting risk owners in managing the Business Priority Risk Register.
 </li>
 <li>
 Review compliance with information security policies such as data classification and clear desk policies, identifying gaps and recommending corrective actions.
 </li>
 <li>
 Deliver training and awareness programs to staff to promote a strong risk-aware culture, and support ongoing communication through newsletters and other channels.
 </li>
 <li>
 Monitor and report on the performance of the information security risk management framework against established KPIs, providing updates to the Risk Leader.
 </li>
 <li>
 Facilitate management reviews of information security risks and controls.
 </li>
 <li>
 Coordinate vulnerability assessments and penetration testing activities, ensuring findings are tracked and remediated.
 </li>
 <li>
 Act as a key contact for security incident response planning and execution, supporting investigations and recommending corrective measures as needed.
 
 
 </li>
 </ul>
 
 Skills And Competencies
 
 
 
 
 Connect to your skills and professional experience
 
 
 
 <ul>
 <li>
 Business Acumen: Ability to translate technical security risks into business impact and communicate effectively with both technical and non-technical stakeholders.
 </li>
 <li>
 Communication: Skilled in presenting risk assessments and control effectiveness clearly and persuasively.
 </li>
 <li>
 Relationship Management: Proven ability to build collaborative relationships with business leaders, IT and other teams, and external partners.
 </li>
 <li>
 Conflict Management: Experience in recognising and managing conflicts related to risk and security issues.
 </li>
 <li>
 Interpersonal Skills: Strong ability to work constructively with diverse teams to foster a risk-aware culture.
 
 
 </li>
 </ul>
 
 Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or a related discipline.
 </li>
 <li>
 7+ years&rsquo; experience in information security, risk management, or related fields.
 </li>
 <li>
 Experience managing information security and privacy risks within large organisations.
 </li>
 <li>
 Relevant certifications such as Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP) are required.
 </li>
 <li>
 ISO 27001 Lead Implementer and/or ISO 27701 Lead Implementer certification is highly desirable.
 
 
 </li>
 </ul>
 
 Connect to your team &ndash; Technology &amp; Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; -Dan, Technology &amp; Transformation
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So, we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
</div>

Search 10000+ Security risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 security risk manager jobs Near Me

Information Security Risk & Reporting Manager

Principal IT Security - (GRC)

Specialist I, Governance, Risk and Compliance

Security + ERW Specialist

Assistant Manager IS GRC

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt

Deloitte Innovation Hub I Internal Role I Risk Officer – Information Security, Cairo, Egypt