وظائف افراد امن في مصر

Job Purpose:<br>This role serves as the process owner of all assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information in compliance with the organisation's information security policies. A key element of the role is working with management to determine acceptable levels of risk for the organisation. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. The role will also be responsible for the implementation of different security solutions to ensure compliance with the different applicable security and risk standards in the Kingdom of Saudi Arabia and other geographies that we will operate in.<br>Key Accountabilities:<br>Develop, implement, and monitor a strategic, comprehensive enterprise information securityand IT risk management program Full abreast with the SAMA IT risk framework and ensure all implementation is in full compliance with the framework, regulations, and guidelines Work directly with the business units to facilitate risk assessment and risk management processes Develop and enhance an information security management framework Understand and interact with related disciplines through committees to ensure the consistentapplication of policies and standards across all technology projects, systems, and services Provide leadership to the enterprise&#39;s information security organization Advise the leadership team on the appropriate administration of information security standards,assisting them in developing plans within their business units to manage these risks effectivelyby understanding the fundamental aspects of their business objectives. Partner with business stakeholders across the company to raise awareness of riskmanagement concerns Assist with the overall business technology planning, providing current knowledge and futurevision of technology and systems Manage institution-wide information security governance processes, chair the Information Security Advisory Committee and lead Information Security Liaisons in the establishment of aninformation security program and project priorities. Perform risk assessments that address security threats, changes to systems and/orapplications, process improvement initiatives, supplier assessments (including downstreamoutsourcers) and other requests from the business. Develop and implement a comprehensive cloud strategy, selecting between public, private, or hybrid cloud models Oversee the allocation of compute, storage, and networking resources using Infrastructure as Code (IaC) to ensure consistency and prevent & configuration drift". Monitor cloud usage and spending to identify underutilized resources, right-sizing instances toensure the cloud investment remains cost-effective. Establish real-time monitoring and alerting systems to proactively detect and resolveperformance bottlenecks or system failures. Implement robust security protocols, including Identity and Access Management (IAM), dataencryption, and regular audits to maintain compliance with industry standards Establish annual and long-range security and compliance goals, define security strategies,metrics, reporting mechanisms and program services; and create maturity models and aroadmap for continual program improvements. Mature and operationalise various GRC capability areas such as enterprise security riskmanagement, compliance management, policy management, 3rd party risk management, andmetrics and reporting. Drive remediation activities from identification, remediation plan, and closure. Hold ownersaccountable for delivery of remediation solutions within the agreed upon/reasonable SLA. Manage BCP/DRP and Incident Response procedures, tests, and audits. Interface with internal and external auditors to articulate security controls when appropriate. Assess and communicate all security risks associated with purchases or practices performedby the company. Work with internal stakeholders across the business to identify, assess, report, track, andremediate risks and support the development of risk mitigation strategies. Make risk-based decisions and trade-offs impacting annual investment strategies and projectprioritisation. Maintain a strong understanding of risk management methodologies and frameworks. Understand business processes, regulations, and controls and develop meaningful tests toensure controls are operating effectively. Perform operational deep dives on compliance-related processes and systems. Identify, gather, track, and report key risk indicators. Work with partners to identify the root cause of issues. Identify potential risks and develop protocols that staff must follow to reduce or manage those risks. Implementing and overseeing the organisation’s cybersecurity program Aligning cybersecurity and business objectives Maintain PCI compliance of the organisation. Working closely with the cybersecurity team Monitoring Incident Response Activities Managing business continuity and disaster recovery Managing the governance and setup of Cloud Infrastructure Promoting a culture of strong information security Managing vendor relationships Utilising cybersecurity budgets effectively Providing awareness and training<br>Job Requirements:<br>Professional security management certification is mandatory (CISSP/CCSP/CISM/CISA) Degree in business administration or a technology-related (computer science or Computer Engineering) field required. 7+ years of experience in Information/Cybersecurity or IT Risk Management Strong knowledge of Cloud computing/Elastic computing across virtualised environments Minimum of 7 years of experience in a combination of risk management, information security and IT jobs Knowledge of common information security management frameworks, such as ISO/IEC 27001 and NIST. Excellent written and verbal communication skills and high level of personal integrity Innovative thinking and leadership with an ability to lead and motivate cross- functional, interdisciplinary teams Experience with contract and vendor negotiations and management, including managed services. Specific experience in Agile (scaled) software development or other best-in-class development practices.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Mission <br><p><b>JOB PURPOSE:&nbsp;</b></p><br><br><p>The Jr Cybersecurity GRC Engineer supports the Governance, Risk, and Compliance (GRC) function by assisting in the implementation and maintenance of essential security policies and compliance activities. This role bridges the gap between technical operations and regulatory standards, ensuring the organization’s cybersecurity posture remains robust under the guidance of the GRC team.</p><br><br> Profile <br><p><b>RESPONSIBILITIES/DUTIES&nbsp;</b></p><br><br><p><b>Governance, Policy &amp; Compliance</b></p><br><br><p>•Support the development, review, and periodic maintenance of information security policies, standards, and internal procedures.</p><br><br><p>•Facilitate the communication of security policies across departments to ensure workforce alignment and organizational adherence.</p><br><br><p>•Assist in the collection, organization, and preservation of compliance evidence required for both internal and external audits.</p><br><br><p>•Contribute to the tracking of audit findings, helping to coordinate the timely remediation of identified gaps.</p><br><br><p><b>Risk Management &amp; Assessment</b></p><br><br><p>•Participate in the identification, assessment, and formal documentation of information security risks throughout the infrastructure.</p><br><br><p>•Maintain updated risk registers, ensuring all mitigation plans are documented and tracked for stakeholder review.</p><br><br><p>•Monitor the execution of risk treatment actions, providing regular status updates to the GRC Engineer.</p><br><br><p>•Conduct due diligence support for third-party and vendor risk assessments to ensure alignment with security requirements.</p><br><br><p><b>Control Monitoring &amp; Reporting</b></p><br><br><p>•Evaluate the operational effectiveness of security controls to identify potential vulnerabilities or performance gaps.</p><br><br><p>•Prepare periodic reports, dashboards, and executive summaries regarding GRC activities and compliance status.</p><br><br><p>•Document GRC workflows meticulously to ensure high-quality, audit-ready records for all security activities.</p><br><br><p>•Recommend incremental improvements to existing GRC processes, tools, and methodologies to enhance operational efficiency.</p><br><br><p><b>Security Operations Governance &amp; Compliance Support</b></p><br><br><p>•Support alignment of Security operations with security policies, standards, and regulatory requirements.</p><br><br><p>•Assist in maintaining Security procedures and playbooks (e.g., logging, detection, incident response).</p><br><br><p>•Support review of detection use cases and monitoring coverage from a compliance perspective.</p><br><br><p>•Assist in ensuring logging and monitoring controls meet audit requirements.</p><br><br><p><b>Safety Responsibilities:</b></p><br><br><p>•Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</p><br><br><p>•Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</p><br><br><p>•Be mindful that Safety, Security, and Environmental protection are everyone’s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</p><br><br><p><b>ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><br><br><p><b>QUALIFICATIONS:&nbsp;</b></p><br><br><p>•Bachelor’s degree in Information Security, Computer Science, IT, or a related field.</p><br><br><p>•CompTIA Security+, ISC2 Certified in Cybersecurity, ISO 27001 Foundation, or OCEG (GRCP/GRCA) is an advantage.</p><br><br><p><b>KNOWLEDGE:&nbsp;</b></p><br><br><p>•Foundational understanding of cybersecurity standards (e.g., ISO 27001, NIST, IEC 62443, GDPR).</p><br><br><p>•Knowledge of risk management concepts and the information security lifecycle.</p><br><br><p>•Familiarity with IT infrastructure, network security concepts, and common enterprise audit processes.</p><br><br><p>•Advanced proficiency in Microsoft Office 365 (Excel, PowerPoint, Word) and basic experience with GRC/Audit management software.</p><br><br><p><b>EXPERIENCE:&nbsp;</b></p><br><br><p>•0-3 years of progressive experience in IT, Information Security, or cybersecurity-related roles.</p><br><br><p><b>DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><br><br><p>•Possesses a strong aptitude for digging into granular data to identify the underlying causes of security indicators.</p><br><br><p>•Maintains a high level of precision in documentation, ensuring that no regulatory or policy detail is overlooked.</p><br><br><p>•Exhibits a proactive interest in emerging cybersecurity threats and modern regulatory landscapes (e.g., AI-driven security).</p><br><br><p>•Capable of bridging technical and non-technical departments to foster a security-conscious workplace culture.</p><br><br><p>•Security-first mindset with a high sense of integrity, responsibility, and ethical conduct.</p><br><br><p>•Resilient and organized while handling workload pressure, capable of balancing multiple tasks while meeting deadlines.</p><br><br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Publication date :</strong> Aug 07, 2026, 12:00AM</p><br><br><p>Contract duration : </p><br><br>Orange Business is here!<br>About us<p>Join us at Orange Business!<br>We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.<br>Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.</p><br><br>About the role<p>• Drive cybersecurity excellence with a strategic mindset – as our Cyber Security Manager, you will own the security landscape for enterprise customers, ensuring robust governance and outstanding service delivery.</p><br><br><p>• Own the security landscape for enterprise customers, ensuring compliance with security policies and best practices.<br>• Deliver expert cybersecurity services to high-profile enterprise customers, focusing on information and cyber security governance.<br>• Oversee the end-to-end security services lifecycle, including defining, assessing, and improving security controls to align with customer objectives.<br>• Maintain strong customer relationships to drive satisfaction and long-term value, addressing their unique security needs.<br>• Design and implement a comprehensive security program that meets contractual scope and customer-specific requirements.<br>• Identify security objectives and conduct gap analyses to strengthen customer security postures.<br>• Collaborate with operations and engineering teams to ensure consistent security outcomes across all customers.<br>• Monitor emerging threats and incidents, providing post-incident analysis and actionable recommendations.<br>• Conduct technical vulnerability assessments and oversee mitigation strategies for identified risks.<br>• Engage in cross-functional teams to continuously improve operational processes, tools, and methodologies.<br>• Stay informed about evolving threats and regulations, contributing to service evolution and improvement initiatives.<br></p><br><br>About you<p>You possess a deep understanding of cybersecurity governance, risk management, and vulnerability management, along with the ability to leverage GRC frameworks to effectively assess and manage security risks across the enterprise. Your strong expertise in threat intelligence and security operations enables you to proactively identify and respond to emerging cyber threats. You hold a Bachelor's Degree in Engineering and relevant certifications such as CISSP or CISM, along with 7 years of experience in the cybersecurity field, complemented by hands-on expertise in major security technologies and strong communication skills.<br><strong>Your professional skills:</strong><br>• S<span>trong expertise in cybersecurity governance, risk management, and vulnerability management. You will be responsible for utilizing GRC frameworks to effectively assess, mitigate, and manage security risks across the enterprise</span></p><br><br><p>• Have a solid understanding of threat intelligence and security operations to proactively identify and respond to emerging cyber threats before they impact the organization.</p><br><br><p>• Proven expertise in managing a complex security stack including Proxy Solutions, Mobile SSL/Remote Access, IPS/IDS, WAF, and Load Balancers is required.</p><br><br><p>• Strong hands-on experience with enterprise firewall technologies, specifically Fortinet, Palo Alto Networks, and Check Point.</p><br><br><p>• hands-on SD-WAN solutions (Fortinet, Palo Alto, Viptela, or Meraki) is required .<br>• experience with SIEM, SOAR, and Splunk. Exposure to Microsoft Sentinel and the Microsoft Defender suite is highly valued and considered a significant plus.</p><br><br><p>• Hands-on expertise in at least one major cloud security platform: Netskope, Prisma Access, Zscaler (ZIA/ZPA/ZDX), or Microsoft Defender for Cloud Apps.</p><br><br><p><br><strong>Your soft skills:</strong><br>• Proficiency in English is mandatory to facilitate effective communication with diverse teams and clients.<br>• Exhibit adaptability and good email etiquette to ensure clear interactions in both written and verbal forms.<br>• Show strong communication skills to effectively convey complex security concepts to non-technical audiences.<br>• Display a can-do attitude, showcasing problem-solving abilities in challenging situations.<br>• Possess a passion for exploration and continuous learning, adapting to technological changes and challenges in the cybersecurity realm.<br></p><br><br><p>At Orange, we are committed to empowering you to realize your full potential in an inclusive and supportive environment. As our Cyber Security Manager, you will play a pivotal role in shaping cybersecurity strategies while driving innovation and excellence in service delivery. You will be part of a collaborative team that values curiosity and open-mindedness, allowing you to explore and implement cutting-edge security solutions that make a tangible impact on our customers' experiences.</p><br><br>What we offer<p><strong>• Global Opportunities:</strong> Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.<br><strong>• Flexible Work Environment:</strong> Flexible working hours and possibility to combine work from office and home (hybrid ways of working).<br><strong>• Professional Development:</strong> training programs and upskilling/re-skilling opportunities.<br><strong>• Career Growth:</strong> Internal growth and mobility opportunities within Orange.<br><strong>• Caring and Daring Culture:</strong> Health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events.<br><strong>• Reward Programs:</strong> Employee Referral Program, Change Maker Awards.</p><br><br>Only your skills matterRegardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neuroatypia, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.<p> At Orange, only your skills matter. </p><br><br> <p> Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have. </p><br><br><br> </div>

.استقبال الزوار والعملاء والترحيب بهم وتوجيههم إلى الجهة المختصة..الرد على المكالمات الهاتفية وتحويلها إلى الأقسام أو الأشخاص المعنيين..استقبال البريد والطرود الواردة والصادرة وتنظيمها..إدارة مواعيد الاجتماعات وحجوزات قاعات الاجتماعات عند الحاجة..تسجيل بيانات الزوار والالتزام بإجراءات الأمن والسلامة.متابعة نظافة وترتيب منطقة الاستقبال بشكل مستمر..تقديم الدعم الإداري مثل الطباعة، وإعداد المستندات، والأرشفة..التنسيق مع الإدارات المختلفة لتلبية احتياجات الزوار والعملاء..التعامل مع استفسارات العملاء وحل المشكلات البسيطة أو تحويلها إلى الجهة المختصة..تنفيذ أي مهام أخرى يكلف بها المدير المباشر ضمن نطاق العمل.<p><strong>تفاصيل إضافية</strong></p><ul><li>عدد الشواغر: 1</li><li>نظام الورديات: صباحية و مسائية</li><li>المزايا: تأمين صحي، تأمين اجتماعي، بدل انتقال، وجبات</li></ul>

Scope of the job<br><br>Job Purpose<br><br>Global Digital & Technology (D&T) has a worldwide responsibility for all IT processes, solutions and services. The aim is to further enhance HEINEKEN Global Functions by delivering common business driven solutions and services.<br><br>The Global Information Security department is part of Global D&T and has the overall responsibility of assuring that HEINEKEN’s IT Risks are properly managed and information assets & technology is properly secured.<br><br>The Global Information Security teams include Cyber Defence Operations (CDO), Security Competence Centre (SCC) and Security Chapters (ERP, Enterprise Architecture, Data Privacy, etc) to design, implement, monitor, respond and assist with recovery activities against cyberattacks. They deliver deep security and risk management expertise to enable Product Teams and Global Functions to form a proper 1st Line of Defense (LoD) by building the right capabilities into their products (security by design) and support them.<br><br>The Global Information Security Director is heading the department and responsible for the Global Information Security Strategy and orchestrating all security activities within this department and relevant stakeholders. He is part of the Global D&T Executive Leadership Team.<br><br>The Cyber Security Officer (CSO) is responsible for the management and implementation of the global Cyber Security Strategy based on the NIST Cyber Security Framework, to reduce the risk of a Cybersecurity incident according to the risk appetite of HEINEKEN and the Global Function, as well as to raise wider Global Function Cybersecurity awareness.<br><br>Key Responsibilities<br><br>Security Operations Implement global security strategies to maintain the continuity of systems and update these based on local threats. Responsible to manage updates related to Global Function Security Standards that are required due to local legislative requirements, in consultation with the Global Information Security Specialist in line with HEINEKEN Security Strategy and supporting the HEINEKEN Business Strategy. Responsible for Global Function security approvals regarding global services (e.g. Hei Net), in order to maintain the highest level of security for the information and IT assets of the company. Assist the Global Information Security department in the design of controls/ standards and procedures that have broad implications, requiring systems integration of one or more technical platforms. Perform Risk reviews using the risk management procedure for all new Global Function programs/services to be deployed in the Global Function operational environment and veto programs which do not comply with HEINEKEN’s security standards. Monitor internal and external information security and cyber security policy compliance, review and assess information security audits. <br><br>Performs, as per the prescribed frequency the Information Security Maturity Assessment (ISMA), and ensures that all related evidence is available in support of the assessment. Monitor and ensure the timely closure of tasks related to audit and internal control issues raised by e.g. Global Audit, External Audit, etc. Develops and manages the Information Security action plan to address identified risks and non-compliances. <br><br>Gains approval from the relevant management team on that action plan and its related budget. Monitors and reports on the execution of that actions plan, reporting to the Global D&T Function management team and centrally to the Global Information Security Team. Analyse and challenge derogation requests regarding the ISP/TSP that Global Functions could have with a new solution or program, and communicate to the Global Information Security Team and Design Authority for approval in order to protect the HEINEKEN security environment. Drive resolution of cyber security incident responses and address security vulnerabilities. <br><br>Perform/guide/drive digital investigations upon the request of Global Function/HR or Legal teams in case of breaches of HEINEKEN’s Code of Business Conduct. If the Global Function faces any critical IT security incidents or breakout, he/she is responsible as the Global Function security incident lead to resolve in consultation with the Cyber Defense Operations Team (CDO), Global Function D&T Directors and Global Function Line Managers. <br><br>Identify and perform independent analysis to resolve complex first-time issues including the analysis of technical and economic feasibility of proposed security systems/ solutions. He/she is also responsible to assist the Global Information Security department for any IT technical audit (e.g. Ethical Hack) to any Global Function IT infrastructure or service that a 3rd Party offers to HEINEKEN with a valid and open contract to ensure that security policies are in place. Advises Global Function teams for security requirements (e.g. Patching, Anti-Virus, Vulnerability Management, etc). Security Awareness Drive training campaigns on cyber security awareness according to the global security awareness program and based on the Global Function reality. Security Strategy Responsible for identifying potential risks and recommendations on how to prevent and/or avoid that risk within the Global Function. Collaborate with the Global Information Security Specialist to understand and develop further the controls and processes required to improve information security. Innovation Accelerates and Drives implementation of new Security strategies and standards from global D&T towards the HEINEKEN Global Functions Provide security expertise across multiple technical platforms to various Global Function stakeholders in all phases of solutions development (Ideation, Design, build, test and deploy) and Operations.<br><br>Budget Responsibilities<br><br>Assigned to Global Function D&T Manager.<br><br>Number Of Direct Reports<br><br>None<br><br> Position profile<br><br>Qualifications<br><br>Bachelor or Master degree in business information technology or a related field<br><br>Possesses relevant certifications, e.g. CISSP / CCSP / CISM / CISA / CRISC<br><br>Experience / Skills Required<br><br>5+ years of working in the cyber security field and previous experience working as a cyber-security officer or manager. French is a must and preferable. Has worked with relevant market standards such as NIST, ISO 27001, COBIT and relevant laws and regulations such as privacy laws. Experience in handling security incidents. Proven ability to dynamically assess risks, threats & threat actors. Able to work in a cross functional environment; preferably a background in the FMCG industry. Sense of Business Urgency and safe-cautious mind to close critical gaps and reduce any security breach. Ability to explain complex technical processes to business stakeholders. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change. Ability to work and team with a multitude of different people and different cultures (as appropriate). Display professionalism, customer service attitude, attention to detail and quality. Possess strong interpersonal skills, relationship management and negotiation skills, strong verbal, and written communication skills. Develop self and others through continuous learning, sharing best practices, knowledge, and expertise. Excellent management and leadership skills.<br><br>Language(s)<br><br>Fluent English #addjob

<p><span >The Senior Data Governance Officer is responsible for developing, implementing, and enforcing organizational data governance frameworks, policies, and standards that ensure data is managed securely, ethically, and in compliance with global regulations. This role serves as the primary steward of IFRC's data governance program, translating strategic governance objectives into practical policies, processes, and procedures that enable safe, ethical data utilization across the organization and protect vulnerable populations. The Data Governance Officer will establish data governance structures, manage roles and responsibilities, consider any applicable regulatory compliance, to assist with improving data quality and security, and foster a culture of data responsibility aligned with IFRC's humanitarian principles and commitment to privacy and dignity. The incumbent will support in developing the organizational approach to the distribution of data capabilities and roles.</span></p><p><strong>Data Governance Framework &amp; Strategy</strong></p><ul><li>Design and implement comprehensive organizational data governance framework, including policies, standards and compliance requirements, aligned with organizational strategy, humanitarian principles, and relevant requirements</li><li>Develop governance roadmaps outlining phased implementation of policies, standards, and controls with clear milestones and success metrics</li><li>Establish governance scope, identifying critical data assets, stakeholder roles, and organizational priorities requiring governance attention</li><li>Create and maintain governance policies covering data classification, ownership, stewardship, quality, security, access, and lifecycle management</li><li>Develop governance principles reflecting IFRC's humanitarian values, including principles of data protection, dignity, transparency, and accountability</li></ul><p><strong>Data Classification and Sensitivity Management</strong></p><ul><li>Develop classification standards and guidance for categorizing data based on sensitivity, criticality, and relevant requirements</li><li>Design and implement sensitivity labeling strategies using Microsoft Information Protection and related tools integrated within Microsoft Fabric and Purview</li><li>Create clear labeling guidelines that are easily understood across the organization</li></ul><p><strong>Data Privacy and Compliance</strong></p><ul><li>Support the Data Protection Office with implementation of IFRC s Policy on the Protection of Personal Data</li><li>Support Data Protection Officer (DPO) with governance policy input, and compliance documentation</li><li>Support Data Protection Impact Assessment (DPIA) processes for new data initiatives, ensuring privacy by design principles</li><li>Draft incident response and data breach protocols in coordination with the DPO and CISO, ensuring timely notification and mitigation in accordance with relevant requirements</li></ul><p><strong>Roles, Responsibilities and Accountability</strong></p><ul><li>Establish, assign and document organizational data governance structure with clear role definitions (Data Owners, Data Stewards, Data Custodians, Data Users) and create related RACI matrices</li><li>Support in the development of organizational approach to distribute Data, Analytics and AI capabilities and roles, across dimensions back-end, supporting and front-end as well as centralized, decentralized and emerging roles.</li><li>Provide steward training and onboarding covering governance policies, data quality management, compliance, and communication expectations</li><li>Establish governance committees and forums (e.g., Data Governance Council, domain steward groups) to facilitate coordination and decision-making</li><li>Monitor role performance and accountability, providing coaching and support to ensure effective governance execution</li></ul><p><strong>Data Quality Standards and Monitoring</strong></p><ul><li>Define organizational data quality standards and dimensions (accuracy, completeness, consistency, timeliness, validity, uniqueness)</li><li>Establish and automate data quality metrics, rules and validation checks aligned with business use cases and decision-making requirements</li><li>Develop data quality assessment and monitoring protocols identifying critical data assets and quality requirements</li><li>Establish data quality governance processes including issue identification, escalation, resolution, and continuous improvement</li><li>Monitor data quality metrics, reporting on trends and issues to governance committees and data stewards</li></ul><p><strong>Asset Inventory and Cataloging</strong></p><ul><li>Oversee the development and maintenance of enterprise data asset inventory</li><li>Establish standards for data asset documentation including business definitions, data lineage, and usage guidance</li><li>Implement and maintain Microsoft Purview data catalog systems for centralized data asset discovery, classification, and governance</li><li>Coordinate cataloging activities across the organization, ensuring data assets are properly documented and discoverable</li><li>Monitor catalog usage and provide training to support effective data discovery and asset management</li></ul><p><strong>Access Management and Information Security</strong></p><ul><li>Develop guidelines for secure information sharing with internal teams, partners, vendors, and external stakeholders, including third-party information sharing agreements</li><li>Build and maintain tools and automation to monitor and audit access patterns, investigating and addressing potential violations of access governance policies</li><li>Support implementation of technical security and privacy controls including access controls (including row and column access controls), encryption, pseudonymization, anonymization, and masking where appropriate</li><li>Coordinate with cybersecurity teams on access controls in Microsoft Fabric and related platforms</li></ul><p><strong>Governance Policy Development and Maintenance</strong></p><ul><li>Create and implement data governance policies addressing data collection, processing, storage, access, sharing, retention, and deletion</li><li>Develop policies specific to sensitive data categories (examples: beneficiary data, health information, location data) with appropriate safeguards</li><li>Monitor policy compliance, investigating deviations and implementing corrective actions</li><li>Maintain policy library and version control, ensuring staff access current guidance</li></ul><p><strong>Desired Candidate Profile</strong></p><p>The Senior Data Governance Officer is responsible for developing, implementing, and enforcing organizational data governance frameworks, policies, and standards that ensure data is managed securely, ethically, and in compliance with global regulations. This role serves as the primary steward of IFRC's data governance program, translating strategic governance objectives into practical policies, processes, and procedures that enable safe, ethical data utilization across the organization and protect vulnerable populations. The Data Governance Officer will establish data governance structures, manage roles and responsibilities, consider any applicable regulatory compliance, to assist with improving data quality and security, and foster a culture of data responsibility aligned with IFRC's humanitarian principles and commitment to privacy and dignity. The incumbent will support in developing the organizational approach to the distribution of data capabilities and roles.</p><ul><li>Design and implement comprehensive organizational data governance framework, including policies, standards and compliance requirements, aligned with organizational strategy, humanitarian principles, and relevant requirements</li><li>Develop governance roadmaps outlining phased implementation of policies, standards, and controls with clear milestones and success metrics</li><li>Establish governance scope, identifying critical data assets, stakeholder roles, and organizational priorities requiring governance attention</li><li>Create and maintain governance policies covering data classification, ownership, stewardship, quality, security, access, and lifecycle management</li><li>Develop governance principles reflecting IFRC's humanitarian values, including principles of data protection, dignity, transparency, and accountability</li><li>Develop classification standards and guidance for categorizing data based on sensitivity, criticality, and relevant requirements</li><li>Design and implement sensitivity labeling strategies using Microsoft Information Protection and related tools integrated within Microsoft Fabric and Purview</li><li>Create clear labeling guidelines that are easily understood across the organization</li><li>Support the Data Protection Office with implementation of IFRC s Policy on the Protection of Personal Data</li><li>Support Data Protection Officer (DPO) with governance policy input, and compliance documentation</li><li>Support Data Protection Impact Assessment (DPIA) processes for new data initiatives, ensuring privacy by design principles</li><li><br></li></ul>

JOB PURPOSE<br>Responsible for implementing and maintaining HDBank information security systems and technologies.<br>Job Responsibilities:<br>Maintain IT security controls documentation. Recognize the security gaps and prepare an action plan. Open support tickets and resolve issue. Responsible for information security projects and makes sure they meet information security objectives. Responsible for providing security during the development stages of software systems, networks and data centers. Develop plans to safeguard computer files against unauthorized modification, destruction or disclosure Perform vulnerability assessments and remediation actions<br>Job Qualifications: <br>Bachelor's Engineering or Computer Science Minimum 3+ years of IT and relevant security experience

Objective: (summary about the position)<br><br>Seeking a highly experienced Security Lead Engineer to lead the design, implementation, and continuous improvement of cybersecurity measures across our hybrid environment. This role requires overseeing infrastructure, application, and cloud security; managing threat detection and response systems; guiding the security posture of internally developed software; and ensuring regulatory compliance through GRC frameworks. The ideal candidate brings technical depth, leadership capabilities, and a proactive mindset to protect our digital assets and business operations.<br><br>Responsibilities:<br><br> Security Architecture & Strategy Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments Ensure secure network topology including segmentation, access control, and VPN tunnels Lead development and enforcement of security policies, procedures, and best practices Work closely with developers and IT architects to embed security into application and infrastructure design SOC, SIEM, and Threat Management Oversee the operation and tuning of Security Operations Center (SOC) including SIEM platforms Manage endpoint protection through EDR and threat-hunting solutions Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies Lead incident response efforts and develop threat prevention strategies Application and Cloud Security Supervise vulnerability scanning and penetration testing for internally developed applications Lead WAF deployment and optimization to protect business-critical web applications Implement security best practices and policy enforcement across multi-cloud environments Governance, Risk & Compliance (GRC) Drive cybersecurity-related compliance programs (e.g., SOC 2 Type 2, ISO 27001) Lead cross-functional GRC initiatives and support internal/external audits Manage security risk assessments and recommend mitigation strategies Documentation & Collaboration Maintain detailed documentation for security controls, policies, systems, and incidents Plan and conduct quarterly security awareness sessions to educate staff on emerging cyber threats, security best practices, and the organization's security policies Work collaboratively with software engineers, network teams, Dev Ops, and business units<br><br>Requirements<br><br>Min requirements:<br><br> Education: Bachelor's degree in engineering, Computer Science, Information Security or a related field Experience: 7 years in cybersecurity and information security roles 5+ years of hands-on experience in security architecture and threat management Qualifications necessary for the vacancy Proven expertise in: Security architecture for hybrid cloud/on-prem setups Firewalls, WAF, EDR, SIEM, UTM, IPS, Proxy, and DDoS mitigation Network security protocols, subnetting, VPNs, and access control models Set of skills necessary for the vacancy Problem-Solving and Analytical Skills: Ability to diagnose and resolve complex technical issues efficiently Skilled in designing and implementing scalable and secure IT solutions Organizational Skills: Strong ability to manage multiple projects and prioritize tasks effectively Commitment to meeting deadlines and maintaining high-quality standards Communication and Teamwork: Excellent written and verbal communication skills Ability to collaborate effectively with team members and stakeholders Certifications (Desirable): CISSP, CISM, CEH, OSCP, CCSP Cloud security certifications (e.g., AWS Security Specialty, Microsoft SC-100/SC-200) IT governance certifications (e.g., ISO 27001 LA, CISA)

We’re Hiring | مطلوب للتعيين<br>Tech Security Lead – E-Commerce<br>???? Location | مكان العمل: Port Said, Egypt – بورسعيد<br>Experience | الخبرة: Minimum 10 years – خبرة لا تقل عن 10 سنوات<br>???? To Apply | للتقديم:Please send your CV to: careers@dominick.com.eg <br>Subject: Tech Security Lead – E-Commerce#Hiring #Job Opportunity #Tech Security #Cyber Security #ECommerce #Port Said #بورسعيد #وظائف #توظيف

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>JOB DETAILS:</strong></p><br><p>Position Title: Security Engineer</p><br><p>Reports to:&nbsp;Information Security and Risk Manager</p><br><p>Business Line/ Department: Information Security</p><br><p><strong>3. JOB PURPOSE: </strong></p><br><p>&nbsp;The Job Holder is Responsible to. Designs, implements, and maintains cybersecurity controls and technologies across the IT environment, ensuring technical security measures are robust, current, and aligned with NCA and internal security policies.</p><br><p><strong>4. Job Deliverables - Accountability</strong></p><br><p><strong>Description</strong></p><br><p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Deliverables</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security architecture designs &amp; system diagrams (network, IAM, security controls) .</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Risk assessment &amp; vulnerability reports (risk register, threat analysis).</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security monitoring dashboards &amp; SIEM reports (threat detection, events, alerts) .</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Incident response artifacts (logs, RCA reports, response playbooks).</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Security configuration &amp; hardening outputs (policies, access controls, system configs) .</p><br><p>­&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Compliance &amp; audit documentation (control evidence, regulatory alignment.</p><br><p><strong>Description</strong></p><br><p><strong>Security Control Implementation</strong></p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Design and implement cybersecurity controls: firewalls, EDR, DLP, PAM, email security, and WAF.</p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Harden infrastructure, endpoints, and applications in line with security baselines.</p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Manage vulnerability scanning and coordinate remediation with IT teams.</p><br><p><strong>Identity &amp; Access Management</strong></p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Administer Identity and Access Management (IAM) controls including Privileged Access Management (PAM).</p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Manage MFA, Conditional Access, and Zero Trust access policies.</p><br><p>•&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Conduct access reviews and enforce least privilege principles.</p><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span><br>POSITION SUMMARY<br>Patrol all areas of the property; assist guests with room access. Monitor Closed Circuit Televisions, perimeter alarm system, duress alarms, and fire life safety system. Lock property entrances when required. Conduct daily physical hazard inspections. Respond to accidents, contact EMS or administer first aid/CPR as required. Assist guests/employees during emergency situations. Notify appropriate individuals in the event of accidents, attacks, or other incidents. Defuse guest/employee disturbances. Call for outside assistance if necessary. Complete incident reports to document all Security/Loss Prevention related incidents. Handle all interruptions and complaints. Resolve safety hazard situations. Escort any unwelcome persons from the property without interrupting the orderly flow of property operation. Report to scenes of vehicle accidents/thefts. Call for assistance using proper code responses. Complete a Loss Prevention shift summary/daily activity report. Maintain confidentiality of all Security/Loss Prevention and property reports/documents; release information only to authorized individuals. Conduct investigations and gather evidence. Conduct interviews with relevant parties.<br>Follow all company policies and procedures; report accidents, injuries, and unsafe work conditions to manager; complete safety training and certifications; ensure uniform and personal appearance are clean and professional; maintain confidentiality of proprietary information; protect company assets. Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs; assist individuals with disabilities; thank guests with genuine appreciation. Speak with others using clear and professional language; prepare and review written documents accurately and completely. Develop and maintain positive working relationships with others; support team to reach common goals. Comply with quality assurance expectations and standards. Stand, sit, or walk for an extended period of time. In addition, some states may have additional licensing/registration requirements to be considered for this position. Read and visually verify information in a variety of formats (e.g., small print). Visually inspect tools, equipment, or machines (e.g., to identify defects). Enter and locate work-related information using computers and/or point of sale systems. Move at a speed required to respond to work situations (e.g., run, walk, jog). Stand, sit, or walk for an extended period of time or for an entire work shift. Move, lift, carry, push, pull, and place objects weighing less than or equal to 50 pounds without assistance and objects weighing in excess of 75 pounds with assistance. Grasp, turn, and manipulate objects of varying size and weight, requiring fine motor skills and hand-eye coordination. Move through narrow, confined, or elevated spaces. Move over sloping, uneven, or slippery surfaces as well as up and down stairs and/or service ramps. Reach overhead and below the knees, including bending, twisting, pulling, and stooping. Perform other reasonable job duties as requested by Supervisors.<br>PREFERRED QUALIFICATIONS<br>Education: High school diploma or G.E.D. equivalent.<br>Related Work Experience: No related work experience.<br>Supervisory Experience: No supervisory experience.<br>License or Certification: None<br>At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.<br>At Le Méridien, we are inspired by the era of glamorous travel, celebrating each culture through the distinctly European spirit of savouring the good life. Our guests are curious and creative, cosmopolitan culture seekers that appreciate moments of connection and slowing down to savour the destination. We provide authentic, chic and memorable service along with experiences that inspire guests to savour the good life. We’re looking for curious and creative people to join our team. If you appreciate connecting with like-minded guests and have a deep desire to create memorable experiences, we invite you to explore career opportunities with Le Méridien. In joining Le Méridien, you join a portfolio of brands with Marriott International. Be where you can do your best work,​ begin&nbsp;your purpose,&nbsp;belong&nbsp;to an amazing global​&nbsp;team, and&nbsp;become&nbsp;the best version of you.</span> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><b>It's fun to work in a company where people truly BELIEVE in what they're doing!</b></p><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><p>Job Description:</p><br><br><br><br><br><br><br><br><p><span>Ingram Micro helps businesses fully realize the promise of technology. No other company delivers the full spectrum of global technology and supply chain services to businesses around the world. Ingram Micro's global infrastructure and deep expertise in technology solutions, supply chain, cloud, and mobility enable its business partners to operate efficiently and successfully in the markets they serve. We’re redefining distribution. Ingram Micro helps businesses run better, grow faster, and achieve their sustainability goals. It's fun to work in a company where people truly BELIEVE in what they're doing!</span></p><br><p><span>The Cyber Security team drives Ingram Micro’s innovative strategies, focusing on vendor sales and market expansion. Collaborate with regional partners to implement global initiatives and adapt strategies to address the unique needs of your market. Your role will be pivotal in maintaining current business relationships, improving inactive accounts, and creating new business opportunities.</span></p><br><p><span>At Ingram Micro, we foster a culture of collaboration, transparency, and continuous improvement. Our team members are encouraged to share ideas, challenge the status quo, and work together to shape the future of technology distribution. Join us and thrive in a diverse, values-driven environment that celebrates growth, learning, and inclusivity.</span></p><br><p><span>As the Business Development Manager - Cyber Security, you will drive and improve vendor sales while meeting the vendor and company objectives and targets. You will micro-manage all layers of the sales channel, improving product depth and market share for all tiers. Your focus will be on maintaining current business relationships, improving inactive accounts, and creating new business opportunities. You will be aware of all project bids and target Ingram Micro involvement in them.</span></p><br><p><span><b>Key Responsibilities:</b></span></p><br><ul><li><span><span>Establish productive, professional relationships with key personnel in assigned partner accounts.</span></span></li><li><span><span>Coordinate the involvement of company personnel to meet partner performance objectives and partners’ expectations.</span></span></li><li><span><span>Meet assigned targets for profitable sales volume and strategic objectives in assigned partner accounts.</span></span></li><li><span><span>Proactively lead a joint partner planning process that develops mutual performance objectives, financial targets, and critical milestones.</span></span></li><li><span><span>Drive adoption of company programs among assigned partners.</span></span></li></ul><p><span><b>Experiences, Skills, and Expectations:</b></span></p><br><ul><li><span><span>Graduate with 5:7 years’ experience in Cyber Security.</span></span></li><li><span><span>Technical Background is preferred&nbsp;</span></span></li><li><span><span>Strong ‘customer-first’ mentality able to utilize relationships to drive results.</span></span></li></ul><p><span>At Ingram Micro, we invest in your future. Through continuous learning, leadership opportunities, and a commitment to fostering innovation, we ensure every team member thrives in their career journey. You will get a great opportunity to be part of the ambitious plans we have for growing one of the most important parts of our organization. We will support you in your professional and personal development, by providing you with access to LinkedIn Learning and many high-quality training courses to increase your technical knowledge and expertise. You will also get the opportunity to work with passionate team members and stay connected as one family.</span></p><br><p><span>#LI-NS1&nbsp;</span></p><br> </div>

<p><h4>Company description</h4> <p>Portaluna, a Morgans Originals hotel</p> <p>Morgans Originals are original hotels with original stories. We stand for vibrancy, intrigue and iconic details, celebrating the feeling of an infinite Friday night, when anything can happen, no matter what day of the week it is. By balancing a refined outlook with the best lifestyle programming, we capture the excitement of being in-the-know — connecting people to the city, the culture and the moment.</p> <p>This is an exciting new position within Ennismore’s growing portfolio of lifestyle brands, representing the first Morgans Originals hotel in Egypt.</p> <h4>Job description</h4> <h4>Responsibilities</h4> <ul> <li>Actively monitor security cameras and conduct regular patrols to ensure the safety of the premises, identifying potential risks and responding appropriately.</li> <li>Ensure the safety of all guests and associates by enforcing policies, responding to security-related incidents, and offering assistance as needed.</li> <li>Monitor and control the entry and exit points of the hotel, verifying guest and associate credentials, and ensuring only authorized individuals access restricted areas.</li> <li>Respond quickly to security breaches, emergencies, or disturbances, including providing first aid if needed, and reporting incidents to management.</li> <li>Be prepared to take immediate action in the event of fire alarms, medical emergencies, or security breaches, coordinating with emergency services when necessary.</li> <li>Maintain accurate records of security-related incidents, including reports on access control, patrols, guest interactions, and any incidents.</li> <li>Provide a visible, approachable, and courteous presence to guests and associates, assisting with inquiries while maintaining the highest level of professionalism and discretion.</li> <li>Work closely with hotel management and other departments (housekeeping, front desk, etc.) to ensure guest safety and satisfaction.</li> <li>Ensure all security protocols and resort policies are followed, including checking for compliance with safety standards and regulations.</li> <li>Stay updated with security training, including fire safety, emergency response procedures, and hotel-specific security protocols.</li> <li>Maintain a high level of confidentiality regarding guest and associate information and any sensitive hotel operations.</li> <li>Perform any other duties or responsibilities as assigned by management to support the effective operation of the department and the broader goals of the property.</li> </ul> <h4>Abilities / key competencies / skills</h4> <p>Alongside these key competencies, the incumbent of the role will be required to demonstrate the fundamentals of the company’s Heartist service culture to be responsive, respectful and deliver a great experience.</p> <h4>Leading myself</h4> <ul> <li>Positive orientation</li> <li>Operational decision making</li> <li>Self-development & management</li> </ul> <h4>Leading others</h4> <ul> <li>Developing an empowered team</li> <li>Leading an engaged and diverse team</li> <li>Communication</li> </ul> <h4>Leading the business</h4> <ul> <li>Advocating guest passion</li> <li>Business planning and analysis</li> <li>Business improvement and change</li> </ul> <h4>Additional information</h4> <p><strong>What awaits you...</strong></p> <ul> <li>The opportunity to join an international, innovative and fast-growing group, committed not only to building new hotels, but to creating a global brand.</li> <li>The ability to challenge the norm and work in an environment that is both creative and rewarding.</li> <li>Be part of a team that is very passionate about creating great hospitality experiences and exploring new locations with every opportunity.</li> <li>A competitive package and plenty of development opportunities.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Mission <br><p><b>JOB PURPOSE:&nbsp;</b></p><br><br><p>The Cybersecurity GRC Engineer plays a critical dual role in safeguarding the organization’s digital assets while advancing its cybersecurity governance maturity. This position is responsible for detecting and responding to threats, managing vulnerabilities, and maintaining core security infrastructure. Simultaneously, the role ensures alignment with regulatory standards and cybersecurity frameworks by managing risk, enforcing compliance, and supporting audit readiness. By integrating operational defense with strategic risk oversight, the engineer contributes to a secure, resilient, and regulation-compliant environment that supports business continuity and digital trust.</p><br><br> Profile <p><b>RESPONSIBILITIES/DUTIES&nbsp;</b></p><br><br><p><b>Cybersecurity Operations</b></p><br><br><p>•Perform root cause analysis and assist in remediation of security breaches.</p><br><br><p>•Conduct vulnerability assessments and ensure timely patching and configuration updates.</p><br><br><p>•Collaborate with IT teams to safeguard systems, networks, and cloud environments.</p><br><br><p><b>Governance, Risk &amp; Compliance (GRC)</b></p><br><br><p>•Develop and enforce security policies, procedures, and standards aligned with ISO 27001, NIST, and internal audit requirements.</p><br><br><p>•Maintain the information security risk register and manage control assessments.</p><br><br><p>•Support third-party risk assessments and internal/external audit readiness.</p><br><br><p>•Perform risk and impact assessments for IT and business processes, proposing mitigation plans.</p><br><br><p>•Monitor compliance with data protection laws, regulatory standards, and internal controls.</p><br><br><p>•Develop cybersecurity awareness content and promote a risk-aware culture.</p><br><br><p><b>Security Monitoring, Metrics &amp; Reporting</b></p><br><br><p>•Build dashboards and metrics for key risk indicators (KRIs) and performance indicators (KPIs).</p><br><br><p>•Provide reports on incident response, compliance gaps, and control effectiveness.</p><br><br><p>•Ensure documentation of security incidents, investigations, and preventive actions.</p><br><br><p>•Support change management processes by reviewing technical risks and security implications of system modifications.</p><br><br><p><b>Continuous Improvement &amp; Research</b></p><br><br><p>•Stay updated on cybersecurity trends, technologies, and threat intelligence.</p><br><br><p>•Recommend tools and best practices to enhance detection, prevention, and recovery capabilities.</p><br><br><p>•Participate in cybersecurity projects, system upgrades, and cross-departmental initiatives.</p><br><br><p>•Drive maturity improvement by contributing to gap analyses, self-assessments, and capability building.</p><br><br><p><b>ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><br><br><p><b>QUALIFICATIONS:</b></p><br><br><p>•Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.</p><br><br><p>•Relevant certifications such as:</p><br><br><p>oTechnical Security: CompTIA Security+, CEH, eJPT, ECIR, or GIAC.</p><br><br><p>oGRC &amp; Risk: CRISC, ISO 27001 Lead Implementer/Auditor.</p><br><br><p>•Fluent in English and Arabic, French is a plus.</p><br><br><p><b>KNOWLEDGE:</b></p><br><br><p>•Strong grasp of cybersecurity principles, risk assessment, incident response, and threat intelligence.</p><br><br><p>•Familiarity with industry frameworks: ISO 27001, NIST CSF, CIS Controls.</p><br><br><p>•Good understanding of IT infrastructure, access control, networking protocols (TCP/IP, DNS, HTTP), and Active Directory.</p><br><br><p>•Working knowledge of scripting (e.g., PowerShell, Python, Bash) is a plus.</p><br><br><p><b>EXPERIENCE:</b></p><br><br><p>•3-5 years of experience in cybersecurity or GRC, preferably within a large or regulated organization.</p><br><br><p>•Practical involvement in security operations, compliance audits, vulnerability assessments, and control implementations.</p><br><br><p>•Experience handling internal and external assessments, including ISO audits and risk evaluations.</p><br><br><p>•Exposure to Operational Technology (OT)/IACS environments is a strong advantage.</p><br><br><p>•Experience with third-party risk management and security audits.</p><br><br><p>•Experience using security technologies: SIEM, firewalls, IDS/IPS, EDR, vulnerability management platform.</p><br><br><p><b>DESIRED BEHAVIORS</b></p><br><br><p>•Security-first mindset with a high sense of integrity, responsibility, and ethical conduct.</p><br><br><p>•Critical thinker who applies analytical skills to diagnose risks and resolve security challenges effectively.</p><br><br><p>•Detail-oriented, especially when evaluating incidents, documentation, and compliance requirements.</p><br><br><p>•Communicates with impact, able to translate technical risks into understandable business terms across all levels.</p><br><br><p>•Collaborative team player who fosters alignment between cybersecurity, IT, and business functions.</p><br><br><p>•Proactive learner who stays current with evolving threat landscapes, compliance standards, and best practices.</p><br><br><p>•Resilient and organized under pressure, capable of balancing multiple tasks while meeting deadlines.</p><br><br><p>•Persuasive and assertive, driving security adoption across the organization without compromising stakeholder relationships.</p><br><br><p>•Comfortable with ambiguity, and adaptable to evolving priorities in a dynamic cybersecurity landscape.</p><br><br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Information Security &amp; Risk Manager1.<br> Job Details Position Title: Information Security &amp; Risk Manager Department: Technology Services / IT Reports To: Information Security / CTO Employment Type: Permanent Location: Maadi, Degla – On-site Grade: As per organizational structure Direct Reports: As per approved organizational structure 2.<br> Job Purpose The Information Security &amp; Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function.<br> The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.<br> The role provides strategic and operational leadership across Information Security Governance, Risk &amp; Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness .<br> 3. Key Accountabilities &amp; Deliverables The role will be accountable for the development, implementation, and continuous improvement of: Information Security Strategy and Cybersecurity Roadmap Information Security policies, standards, procedures, and guidelines Information Security Management System (ISMS) Enterprise IT and Cybersecurity Risk Register Information Security Risk Assessment Reports Risk Treatment and Remediation Plans Security Compliance Reports, including ISO 27001 and applicable regulatory requirements Cybersecurity Control Framework and Control Effectiveness Reports Vulnerability Assessment and Penetration Testing (VAPT) Reports Cybersecurity Incident Reports and Root Cause Analysis (RCA) Security Monitoring and Threat Dashboards Cybersecurity KPI and KRI Dashboards Identity and Access Management (IAM) Policies, Models, and Access Matrices Data Classification and Data Protection Framework Internal and External Audit Reports and Evidence Repository Audit Findings and Remediation Tracking Business Continuity and Disaster Recovery (BCP/DR) Security Alignment Security Awareness and Training Programs and Reports Regulatory Assessments, submissions, and compliance evidence 4.<br> Key ResponsibilitiesA.<br> Information Security Strategy &amp; Governance Define, develop, and execute the organization’s Information Security Strategy and cybersecurity roadmap.<br> Own and continuously improve the Information Security Management System (ISMS).<br> Develop and maintain information security policies, standards, procedures, and guidelines.<br> Establish effective cybersecurity governance frameworks aligned with business objectives.<br> Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership.<br> Establish and monitor security KPIs, KRIs, and performance metrics.<br> Ensure information security requirements are incorporated into technology initiatives, projects, and business processes.<br> B. Information Security Risk Management Lead regular information security and cybersecurity risk assessments across the organization.<br> Own and maintain the enterprise IT and cybersecurity risk register.<br> Identify, assess, prioritize, and communicate information security risks.<br> Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure.<br> Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies.<br> Translate technical cybersecurity risks into business impact and communicate them effectively to senior management.<br> Monitor the organization’s overall cyber risk profile and provide recommendations for risk reduction.<br> C. Security Operations &amp; SOC Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers.<br> Ensure effective security monitoring, threat detection, investigation, and response capabilities.<br> Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies.<br> Establish and monitor security incident management processes.<br> Review security alerts, incidents, trends, and threat intelligence.<br> Ensure appropriate escalation and response mechanisms are in place for critical security events.<br> Monitor and improve the effectiveness of security controls and operational processes.<br> D. Cybersecurity Incident Response Lead the organization’s cybersecurity incident response capability.<br> Ensure effective detection, containment, eradication, recovery, and post-incident activities.<br> Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP).<br> Conduct regular incident response exercises and simulations.<br> Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed.<br> Track corrective and preventive actions resulting from security incidents.<br> Ensure lessons learned are incorporated into security controls and processes.<br> E. Governance, Risk &amp; Compliance Lead Information Security Governance, Risk, and Compliance (GRC) activities.<br> Ensure compliance with applicable regulatory and industry requirements, including: National Cybersecurity Authority (NCA) requirements Saudi Personal Data Protection Law (PDPL) National Data Management Office (NDMO) requirements, where applicable ISO/IEC 27001 Other applicable cybersecurity and data protection regulations Coordinate internal and external security audits and assessments.<br> Manage audit evidence collection and maintain an organized security evidence repository.<br> Track audit findings, remediation plans, and closure status.<br> Prepare management and regulatory compliance reports.<br> Support regulatory assessments, reviews, and submissions as required.<br> F. Data Protection &amp; Privacy Establish and maintain data protection and information classification frameworks.<br> Ensure appropriate security controls are implemented for sensitive and personal data.<br> Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements.<br> Establish appropriate data access, handling, retention, and protection controls.<br> Support privacy and data protection risk assessments where required.<br> G. Vulnerability &amp; Security Testing Oversee vulnerability management activities across IT environments.<br> Coordinate Vulnerability Assessments and Penetration Testing (VAPT).<br> Review vulnerability and penetration testing reports.<br> Ensure security vulnerabilities are appropriately prioritized based on business risk.<br> Track remediation activities and validate closure of critical and high-risk vulnerabilities.<br> Ensure security testing is incorporated into relevant technology projects and systems.<br> H. Identity &amp; Access Management Establish and maintain IAM policies, standards, and access control frameworks.<br> Ensure appropriate access governance and segregation of duties.<br> Review privileged access and high-risk accounts.<br> Support periodic user access reviews and access recertification.<br> Ensure access controls align with business requirements and security policies.<br> I. Security Awareness &amp; Culture Develop and implement an organization-wide security awareness program.<br> Lead cybersecurity awareness campaigns and security training.<br> Implement phishing simulation and social engineering awareness programs.<br> Monitor employee security awareness performance and identify improvement areas.<br> Promote a strong cybersecurity culture across all business functions.<br> J. Business Continuity &amp; Disaster Recovery Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans.<br> Participate in BCP/DR risk assessments and exercises.<br> Ensure critical systems have appropriate security, recovery, and resilience controls.<br> Support testing and continuous improvement of security-related recovery procedures.<br> 5. Qualifications &amp; ExperienceMinimum Qualifications Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security , or a related discipline.<br> CISSP or CISM certification – Mandatory.<br> ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.<br> NCA-related cybersecurity accreditation or certification is preferred.<br> Minimum Experience 8–10 years of professional experience in Information Security / Cybersecurity.<br> At least 3 years of experience in a cybersecurity or information security management/leadership role.<br> Proven experience managing enterprise cybersecurity programs and security teams.<br> Proven experience in GRC, risk management, security operations, and incident response.<br> Proven experience working with regulatory compliance, audits, and cybersecurity frameworks.<br> 6. Technical &amp; Professional Skills The successful candidate should demonstrate: Strong knowledge of cybersecurity frameworks, standards, and best practices.<br> Deep understanding of NCA, PDPL, NDMO, ISO 27001 , and applicable data protection requirements.<br> Strong expertise in Governance, Risk, and Compliance (GRC).<br> Experience with SOC operations and SIEM platforms such as Microsoft Sentinel, Splunk , or equivalent.<br> Strong understanding of vulnerability management and penetration testing.<br> Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP).<br> Strong understanding of IAM and access governance.<br> Knowledge of data protection, data classification, and data governance.<br> Strong understanding of secure architecture and security controls.<br> Ability to develop and monitor cybersecurity KPIs and KRIs.<br> Strong audit and regulatory assessment experience.<br> Ability to assess and communicate cybersecurity risks in terms of business impact.<br> Strong strategic thinking and high-level decision-making capability.<br> Excellent leadership and people-management skills.<br> Ability to manage cross-functional teams and stakeholders under pressure.<br> Strong communication, presentation, and reporting skills.<br> Bilingual proficiency in Arabic and English.<br> 7. Leadership Competencies Strategic Thinking Cybersecurity Leadership Risk-Based Decision Making Stakeholder Management Executive Communication Team Leadership &amp; Development Problem Solving Crisis and Incident Management Governance &amp; Accountability Continuous Improvement Business Acumen Change Management Special Requirements Ability to work effectively in a fast-paced and dynamic environment.<br> Ability to manage cybersecurity incidents and critical security situations.<br> Willingness to participate in security incident response and escalation activities when required.<br> Strong confidentiality and professional integrity.<br> Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders.<br></span> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span><br>POSITION SUMMARY<br>Patrol all areas of the property; assist guests with room access. Monitor Closed Circuit Televisions, perimeter alarm system, duress alarms, and fire life safety system. Lock property entrances when required. Conduct daily physical hazard inspections. Respond to accidents, contact EMS or administer first aid/CPR as required. Assist guests/employees during emergency situations. Notify appropriate individuals in the event of accidents, attacks, or other incidents. Defuse guest/employee disturbances. Call for outside assistance if necessary. Complete incident reports to document all Security/Loss Prevention related incidents. Handle all interruptions and complaints. Resolve safety hazard situations. Escort any unwelcome persons from the property without interrupting the orderly flow of property operation. Report to scenes of vehicle accidents/thefts. Call for assistance using proper code responses. Complete a Loss Prevention shift summary/daily activity report. Maintain confidentiality of all Security/Loss Prevention and property reports/documents; release information only to authorized individuals. Conduct investigations and gather evidence. Conduct interviews with relevant parties.<br>Follow all company policies and procedures; report accidents, injuries, and unsafe work conditions to manager; complete safety training and certifications; ensure uniform and personal appearance are clean and professional; maintain confidentiality of proprietary information; protect company assets. Welcome and acknowledge all guests according to company standards; anticipate and address guests’ service needs; assist individuals with disabilities; thank guests with genuine appreciation. Speak with others using clear and professional language; prepare and review written documents accurately and completely. Develop and maintain positive working relationships with others; support team to reach common goals. Comply with quality assurance expectations and standards. Stand, sit, or walk for an extended period of time. In addition, some states may have additional licensing/registration requirements to be considered for this position. Read and visually verify information in a variety of formats (e.g., small print). Visually inspect tools, equipment, or machines (e.g., to identify defects). Enter and locate work-related information using computers and/or point of sale systems. Move at a speed required to respond to work situations (e.g., run, walk, jog). Stand, sit, or walk for an extended period of time or for an entire work shift. Move, lift, carry, push, pull, and place objects weighing less than or equal to 50 pounds without assistance and objects weighing in excess of 75 pounds with assistance. Grasp, turn, and manipulate objects of varying size and weight, requiring fine motor skills and hand-eye coordination. Move through narrow, confined, or elevated spaces. Move over sloping, uneven, or slippery surfaces as well as up and down stairs and/or service ramps. Reach overhead and below the knees, including bending, twisting, pulling, and stooping. Perform other reasonable job duties as requested by Supervisors.<br>PREFERRED QUALIFICATIONS<br>Education: High school diploma or G.E.D. equivalent.<br>Related Work Experience: No related work experience.<br>Supervisory Experience: No supervisory experience.<br>License or Certification: None<br>At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.<br>At Le Méridien, we are inspired by the era of glamorous travel, celebrating each culture through the distinctly European spirit of savouring the good life. Our guests are curious and creative, cosmopolitan culture seekers that appreciate moments of connection and slowing down to savour the destination. We provide authentic, chic and memorable service along with experiences that inspire guests to savour the good life. We’re looking for curious and creative people to join our team. If you appreciate connecting with like-minded guests and have a deep desire to create memorable experiences, we invite you to explore career opportunities with Le Méridien. In joining Le Méridien, you join a portfolio of brands with Marriott International. Be where you can do your best work,​ begin&nbsp;your purpose,&nbsp;belong&nbsp;to an amazing global​&nbsp;team, and&nbsp;become&nbsp;the best version of you.</span> </div>