senior information security consultant

Burraq Consulting

<div><div><div>Closing on: May 31, 2026</div></div><div><div><div><div>
Job Category: Remote
</div><div>Job Type: Freelance
</div><div>Job Location: Pakistan
</div><div>Salary: Project Based
</div><div>Experience: 5 Years
</div><div>Department: Auditing and Compliance
</div><div>Education: Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader">About Us</h3>

Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.
<div>
</div><h3 class="jobSectionHeader">Job Overview</h3>

We are seeking experienced ISO 27001 Consultants to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.

This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.
<div>
</div><h3 class="jobSectionHeader">Key Responsibilities</h3>
<ul><li>Lead end-to-end ISO 27001 implementation projects</li>
<li>Conduct gap assessments against ISO/IEC 27001 standards</li>
<li>Develop and review ISMS documentation (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform risk assessments and risk treatment planning</li>
<li>Provide guidance on Annex A controls implementation</li>
<li>Conduct internal audits and support clients during certification audits</li>
<li>Deliver awareness and training sessions to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><h3 class="jobSectionHeader">Requirements</h3>
<ul><li>Proven experience in ISO/IEC 27001 implementation or consulting</li>
<li>Strong understanding of ISMS framework and risk management methodologies</li>
<li>Experience with Statement of Applicability (SoA) and control mapping</li>
<li>Familiarity with ISO 27001:2022 standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><h3 class="jobSectionHeader">Preferred Skills</h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><h3 class="jobSectionHeader">Engagement Model</h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><h3 class="jobSectionHeader">How to Apply</h3>

Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: people@burraqconsulting.com with subject line &ldquo;Information Security Consultant&ldquo;.</div></div>

Senior Information Security (ISO 27001) Consultant

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk. 
 
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success. 
 
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries. 
 
Key job responsibilities 
As an experienced technology professional, you will be expected to: 
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants. 
2. Lead internal initiatives to deliver quantifiable impact 
3. Develop strategic relationships with internal and external leaders 
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs 
5. Enable and engage delivery partners in project delivery 
6. Provide mentorship and coaching to develop others 
 
A day in the life 
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
 
 
About the team 
ABOUT AWS: 
 
Diverse Experiences
 
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
Why AWS
 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Work/Life Balance
 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud. 
 
Inclusive Team Culture
 
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 
 
Mentorship and Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually 
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div>

Senior Security Consultant, Global Proserve Security

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines. 
</div>Responsibilities:
<ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li>Continue to focus on process improvement for the customer facing incident response services
</li><li>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</li><li>Conduct network forensics and log analysis during IR engagements
</li><li>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</li><li>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</li><li>Develop complete and informative reports and presentations for both executive and technical audience
</li><li>Availability during nights/weekends as needed for IR engagements 
</li></ul>Required Skills:
<ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul>Education:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Amazon Web Services (AWS)

<div>
 
 Description
 
 
 
 The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
 
 
 The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?
 
 
 The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.
 
 
 We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.
 
 
 Key job responsibilities
 
 
 Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs
 
 
 Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
 
 
 Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.
 
 
 Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
 
 
 Ability to travel to customer sites as needed.
 
 
 
 About The Team
 
 
 
 AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.
 
 
 Diverse Experiences
 
 
 Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
 Why AWS
 
 
 Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 
 
 Work/Life Balance
 
 
 We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 
 
 Inclusive Team Culture
 
 
 Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 
 
 Mentorship and Career Growth
 
 
 We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
 
 Hybrid Work
 
 
 We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.
 
 
 
 Basic Qualifications
 
 
 
 <ul>
 <li>
 5+ years in IT security, compliance and risk management, data privacy, or security controls.
 </li>
 <li>
 3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
 </li>
 <li>
 3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
 </li>
 <li>
 3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
 </li>
 <li>
 Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials
 </li>
 <li>
 Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
 </li>
 <li>
 Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.
 </li>
 <li>
 Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
 </li>
 <li>
 Demonstrated ability to think strategically about business, product, and technical challenges.
 </li>
 <li>
 Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.
 
 
 </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 
 
 
 
 Company
 
 - Amazon Web Services EMEA Dubai FZ Branch
 
 
 Job ID: A10383756
</div>

Senior Assurance Consultant, AWS Security Assurance Services

Bank Alfalah Limited

<div>
 
 Job Purpose:
 
 
 The Governance, Risk &amp; Compliance Manager is responsible for establishing, managing, and continuously improving the organization&rsquo;s information security governance, risk management, and compliance framework. The role ensures alignment with regulatory requirements, industry standards, and business objectives, while providing strategic oversight, leadership, and assurance to senior management
 
 
 
 
 
 Responsibilities:
 
 <ul>
 <li>
 Support the execution of internal and external information security audits in collaboration with the Team lead.
 </li>
 <li>
 Interpret and implement regulatory requirements and liaise with internal teams to ensure compliance.
 </li>
 <li>
 Facilitate coordination between business and technical teams to conduct comprehensive security reviews.
 </li>
 <li>
 Work with stakeholders to recommend and track risk mitigation measures, ensuring timely closure of identified gaps/observations.
 </li>
 <li>
 Maintain and oversee the information security risk register.
 </li>
 <li>
 Define and maintain risk management framework including risk assessment methodology and risk appetite alignment
 </li>
 <li>
 Coordinate with IT/security teams for mitigation strategies.
 </li>
 <li>
 Assist TL in preparation of reports/presentations for management reporting and ITSC/BITC.
 </li>
 <li>
 Lead and support the development, implementation, and continuous improvement of information security policies, procedures, and governance frameworks to ensure alignment with industry standards and regulatory requirements.
 </li>
 <li>
 Define and monitor KPIs/KRIs to measure effectiveness of security controls and risk posture
 </li>
 <li>
 Ensure organizational policies, processes, and operations achieve full compliance with SBP regulatory requirements, while maintaining alignment with cross‑border regulations.
 </li>
 <li>
 Oversee cyber security and information security (NESA Compliance) programs.
 </li>
 <li>
 Lead risk assessments and ensure compliance of vendors with security requirements
 </li>
 <li>
 Assist in finding technical gaps/weaknesses in BAFL environment through gap assessment exercise.
 </li>
 <li>
 Lead, and manage the IS GRC team in absence of Team Lead
 </li>
 <li>
 Manage risk acceptance process and ensure proper approval from the management
 </li>
 <li>
 Conduct cybersecurity awareness sessions bi-annually for employees to enhance their knowledge of security best practices, helping them recognize and prevent social engineering threats such as phishing, and promoting safer digital behavior
 </li>
 <li>
 Coordinate and manage regulatory inspections and ensure timely closure of observations
 </li>
 </ul>
 
 
</div>

Senior Manager Information Security

Thndr

<div><h1 class="jobSectionHeader">About The Role</h1>
Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).
Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:<ul><li>
Information Security (Governance, Risk, Compliance &amp; Assurance) &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.</li><li>
Security Engineering &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.</li></ul>
This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.<h1 class="jobSectionHeader">
What You'll Do</h1>
Security Strategy &amp; Program Ownership<ul><li>
Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.</li><li>
Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.</li><li>
Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.</li></ul>
Governance, Risk &amp; Compliance<ul><li>
Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.</li><li>
Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.</li><li>
Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.</li><li>
Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.</li></ul>
Security Engineering &amp; Technical Oversight<ul><li>
Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.</li><li>
Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.</li><li>
Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.</li><li>
Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.</li></ul>
Team &amp; Function Leadership<ul><li>
Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.</li><li>
Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.</li><li>
Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.</li></ul><h1 class="jobSectionHeader">
What You'll Need</h1>
Experience<ul><li>
8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.</li><li>
Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.</li><li>
Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.</li><li>
Demonstrated ability to build and scale security programs in high-growth environments.</li></ul>
Domain Knowledge<ul><li>
Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.</li><li>
Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.</li></ul>
Frameworks &amp; Compliance<ul><li>
Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.</li><li>
Experience managing regulatory relationships and preparing board- and committee-level security reporting.</li></ul>
Leadership &amp; Communication<ul><li>
Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.</li><li>
A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.</li><li>
Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.</li></ul>
Nice to Have<ul><li>
Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.</li><li>
Relevant certifications: CISSP, CISM, or equivalent.</li></ul><h1 class="jobSectionHeader">
Who Are We?</h1>
Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.
History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:<ul><li>
High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.</li><li>
Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.</li><li>
Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.</li></ul>
We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:<ul><li>
5.5 million app downloads</li><li>
EGP 1B+ average daily traded value across 2025</li><li>
#1 digital investing platform in Egypt for the third consecutive year</li><li>
76% of users are first-time investors</li><li>
40% of our users come from outside of capital cities and have previously had limited access to financial institutions</li></ul>
Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.
Rumble was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.
Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.
At Thndr, we're looking for people driven by our mission to help us democratize investing across the MENA region.</div>

Head Of Information Security

Mindstream

Hiring: Senior Business Analyst &ndash; InfoSec &amp; Fraud Management Location: Qatar Sector: Banking Duration: 12 Months and ExtendableWe are seeking a Senior Business Analyst with a strong background in Information Security (InfoSec), IT Application Access Management, Data Privacy Compliance, Enterprise Fraud Management Systems, and IT Disaster Recovery for a leading banking project in Qatar.Key Responsibilities<ul><li>Collaborate with cross-functional teams to gather, analyze, and document business requirements related to InfoSec, access management, data privacy, and disaster recovery.</li><li>Prepare detailed Business Requirement Documents (BRD) and Functional Requirement Documents (FRD).</li><li>Identify and prioritize critical applications for disaster recovery site implementation to ensure business continuity during cyber incidents.</li><li>Conduct stakeholder workshops and meetings to ensure requirements are clearly defined and aligned.</li><li>Support implementation and testing of enterprise fraud management systems.</li><li>Analyze prerequisites for SailPoint application onboarding.</li><li>Maintain project documentation including change requests, progress updates, and outcome assessments.</li></ul>Qualifications &amp; Skills<ul><li>Proven experience with enterprise fraud management systems (e.g., SAS, Safer Payments).</li><li>Strong understanding of IT disaster recovery strategies and backup site implementation.</li><li>Strong analytical and problem-solving skills.</li><li>Excellent communication and stakeholder management abilities.</li><li>Familiarity with data protection regulations (e.g., GDPR, CCPA).</li><li>Knowledge of Agile and Waterfall methodologies.</li><li>Certifications such as CBAP, CISA, CISM, CISSP are a plus.</li></ul>Application Question(s):<ul><li>How many years of experience do you have in Information Security (InfoSec) or IT Security?</li><li>Do you have hands-on experience with enterprise fraud management systems (e.g., SAS, Safer Payments)?</li><li>Have you worked on IT Disaster Recovery or backup site implementation projects?</li><li>Do you have experience in IT application access management (e.g., SailPoint onboarding)?</li><li>Are you familiar with data privacy regulations such as GDPR or CCPA?</li><li>Which project methodologies have you worked with? (Agile / Waterfall / Both)</li><li>Do you hold any relevant certifications (CBAP, CISA, CISM, CISSP)?</li><li>What is current salary? full package - QAR</li><li>What is your expected salary? full package QAR</li><li>What is your notice period?</li></ul>Work Location: In person

Senior Business Analyst – InfoSec & Fraud Management

Search 10000+ Senior information security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.