وظائف مراقب كاميرات في مصر

We are seeking an experienced Cyber Defence Lead to establish and lead Nawy's cyber defence capabilities. This role is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats while continuously improving the organization's detection and response capabilities.<br><br>The Cyber Defence Lead will oversee Security Operations, Incident Response, Threat Detection, Threat Hunting, and Security Monitoring activities across cloud and on-premises environments. The role will work closely with Security Engineering, Infrastructure, Product Engineering, and GRC teams to strengthen the organization's ability to prevent, detect, and respond to cyber threats.<br><br><ul><li>Lead the organization's Security Operations and Cyber Defence functions</li><li>Develop and maintain security monitoring and incident response processes, procedures,</li><li>and playbooks</li><li>Manage and continuously improve SIEM, EDR, and security monitoring capabilities</li><li>Lead the investigation, containment, eradication, and recovery activities for security</li><li>incidents</li><li>Develop and maintain threat detection use cases and detection engineering practices</li><li>Establish threat intelligence and threat hunting capabilities to proactively identify</li><li>emerging threats</li><li>Coordinate security incident communications and reporting to relevant stakeholders</li><li>Ensure continuous monitoring of cloud, endpoint, network, and application security</li><li>events</li><li>Conduct post-incident reviews and drive improvements to security controls and</li><li>operational processes</li><li>Collaborate with Security Engineering to enhance security visibility and detection</li><li>coverage</li><li>Define and track cyber defence metrics, including MTTD, MTTR, detection coverage,</li><li>and incident trends</li><li>Manage relationships with external MSSPs, incident response partners, and threat</li><li>intelligence providers when required</li><li>Support regulatory reporting requirements related to cybersecurity incidents<br><br></li></ul><strong>Requirements<br><br></strong><ul><li>At least 6 years of experience in Security Operations, Incident Response, Threat</li><li>Hunting, or Cyber Defence roles</li><li>Strong experience working with SIEM, EDR, SOAR, threat intelligence, and security</li><li>monitoring platforms</li><li>Experience leading security incident investigations and coordinating response efforts</li><li>Strong understanding of attack techniques, threat actor behaviors, and the MITRE</li><li>ATT&amp;CK framework</li><li>Experience working with cloud security monitoring across AWS and Google Cloud</li><li>Platform (GCP)</li><li>Familiarity with digital forensics, malware analysis concepts, and incident response</li><li>methodologies</li><li>Knowledge of security frameworks and standards including ISO 27001 and NIST</li><li>Cybersecurity Framework</li><li>Relevant certifications such as CISSP, GCIA, GCIH, GCFA, GMON, SC-200, or</li><li>equivalent are preferred</li><li>Familiarity with cybersecurity, risk, and data protection regulations in Egypt, including</li><li>FRA requirements, and relevant DIFC regulatory frameworks</li><li>University/college degree in a relevant professional field</li><li>Excellent communication skills in English, both written and spoken</li></ul>

Company Description Elbedaya Logistics, founded in 2004, is a leading freight forwarding company in Egypt known for its successful management, experience, and dedicated team. The company ensures 24-hour follow-up systems to keep shippers informed every step of the way. Elbedaya Logistics guarantees timely and safe delivery of products to their destinations through established relationships with various carriers. Key responsibilities:✔️ Oversee daily accounting operations related to shipping and freight forwarding.✔️ Manage shipping accounts and reconcile financial transactions accurately.✔️ Prepare invoices, debit/credit notes, financial statements, and accounting reports.✔️ Monitor Accounts Payable (AP) and Accounts Receivable (AR).✔️ Follow up on customer collections and supplier payments.✔️ Coordinate financial matters with shipping lines, agents, customers, and internal departments.✔️ Review freight costing, job costing, and profitability analysis.✔️ Reconcile supplier, customer, and agent accounts.✔️ Prepare monthly closing reports, cash flow reports, and financial analyses.✔️ Ensure compliance with accounting standards, tax regulations, and maritime industry requirements.✔️ Maintain accurate accounting records and support internal/external audits.✔️ Lead and supervise the accounting team.✔️ Assist in budgeting, financial planning, and cost-control initiatives.✔️ Ensure all financial transactions are accurately recorded in the IST ERP System. Qualifications:???? Bachelor's degree in Accounting, Finance, or a related field.✔️ 5–7 years of experience as a Chief Accounting Officer within the Shipping, Freight Forwarding, or Logistics industry.✔️ Mandatory experience using the IST ERP System .✔️ Strong analytical, leadership, and problem-solving skills.✔️ Advanced Microsoft Excel and Microsoft Office skills.✔️ Excellent written and spoken English. ???? Apply Now Send your CV to:hr@elbedayalogistics.com

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Information Security &amp; Risk Manager1.<br> Job Details Position Title: Information Security &amp; Risk Manager Department: Technology Services / IT Reports To: Information Security / CTO Employment Type: Permanent Location: Maadi, Degla – On-site Grade: As per organizational structure Direct Reports: As per approved organizational structure 2.<br> Job Purpose The Information Security &amp; Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function.<br> The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.<br> The role provides strategic and operational leadership across Information Security Governance, Risk &amp; Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness .<br> 3. Key Accountabilities &amp; Deliverables The role will be accountable for the development, implementation, and continuous improvement of: Information Security Strategy and Cybersecurity Roadmap Information Security policies, standards, procedures, and guidelines Information Security Management System (ISMS) Enterprise IT and Cybersecurity Risk Register Information Security Risk Assessment Reports Risk Treatment and Remediation Plans Security Compliance Reports, including ISO 27001 and applicable regulatory requirements Cybersecurity Control Framework and Control Effectiveness Reports Vulnerability Assessment and Penetration Testing (VAPT) Reports Cybersecurity Incident Reports and Root Cause Analysis (RCA) Security Monitoring and Threat Dashboards Cybersecurity KPI and KRI Dashboards Identity and Access Management (IAM) Policies, Models, and Access Matrices Data Classification and Data Protection Framework Internal and External Audit Reports and Evidence Repository Audit Findings and Remediation Tracking Business Continuity and Disaster Recovery (BCP/DR) Security Alignment Security Awareness and Training Programs and Reports Regulatory Assessments, submissions, and compliance evidence 4.<br> Key ResponsibilitiesA.<br> Information Security Strategy &amp; Governance Define, develop, and execute the organization’s Information Security Strategy and cybersecurity roadmap.<br> Own and continuously improve the Information Security Management System (ISMS).<br> Develop and maintain information security policies, standards, procedures, and guidelines.<br> Establish effective cybersecurity governance frameworks aligned with business objectives.<br> Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership.<br> Establish and monitor security KPIs, KRIs, and performance metrics.<br> Ensure information security requirements are incorporated into technology initiatives, projects, and business processes.<br> B. Information Security Risk Management Lead regular information security and cybersecurity risk assessments across the organization.<br> Own and maintain the enterprise IT and cybersecurity risk register.<br> Identify, assess, prioritize, and communicate information security risks.<br> Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure.<br> Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies.<br> Translate technical cybersecurity risks into business impact and communicate them effectively to senior management.<br> Monitor the organization’s overall cyber risk profile and provide recommendations for risk reduction.<br> C. Security Operations &amp; SOC Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers.<br> Ensure effective security monitoring, threat detection, investigation, and response capabilities.<br> Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies.<br> Establish and monitor security incident management processes.<br> Review security alerts, incidents, trends, and threat intelligence.<br> Ensure appropriate escalation and response mechanisms are in place for critical security events.<br> Monitor and improve the effectiveness of security controls and operational processes.<br> D. Cybersecurity Incident Response Lead the organization’s cybersecurity incident response capability.<br> Ensure effective detection, containment, eradication, recovery, and post-incident activities.<br> Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP).<br> Conduct regular incident response exercises and simulations.<br> Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed.<br> Track corrective and preventive actions resulting from security incidents.<br> Ensure lessons learned are incorporated into security controls and processes.<br> E. Governance, Risk &amp; Compliance Lead Information Security Governance, Risk, and Compliance (GRC) activities.<br> Ensure compliance with applicable regulatory and industry requirements, including: National Cybersecurity Authority (NCA) requirements Saudi Personal Data Protection Law (PDPL) National Data Management Office (NDMO) requirements, where applicable ISO/IEC 27001 Other applicable cybersecurity and data protection regulations Coordinate internal and external security audits and assessments.<br> Manage audit evidence collection and maintain an organized security evidence repository.<br> Track audit findings, remediation plans, and closure status.<br> Prepare management and regulatory compliance reports.<br> Support regulatory assessments, reviews, and submissions as required.<br> F. Data Protection &amp; Privacy Establish and maintain data protection and information classification frameworks.<br> Ensure appropriate security controls are implemented for sensitive and personal data.<br> Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements.<br> Establish appropriate data access, handling, retention, and protection controls.<br> Support privacy and data protection risk assessments where required.<br> G. Vulnerability &amp; Security Testing Oversee vulnerability management activities across IT environments.<br> Coordinate Vulnerability Assessments and Penetration Testing (VAPT).<br> Review vulnerability and penetration testing reports.<br> Ensure security vulnerabilities are appropriately prioritized based on business risk.<br> Track remediation activities and validate closure of critical and high-risk vulnerabilities.<br> Ensure security testing is incorporated into relevant technology projects and systems.<br> H. Identity &amp; Access Management Establish and maintain IAM policies, standards, and access control frameworks.<br> Ensure appropriate access governance and segregation of duties.<br> Review privileged access and high-risk accounts.<br> Support periodic user access reviews and access recertification.<br> Ensure access controls align with business requirements and security policies.<br> I. Security Awareness &amp; Culture Develop and implement an organization-wide security awareness program.<br> Lead cybersecurity awareness campaigns and security training.<br> Implement phishing simulation and social engineering awareness programs.<br> Monitor employee security awareness performance and identify improvement areas.<br> Promote a strong cybersecurity culture across all business functions.<br> J. Business Continuity &amp; Disaster Recovery Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans.<br> Participate in BCP/DR risk assessments and exercises.<br> Ensure critical systems have appropriate security, recovery, and resilience controls.<br> Support testing and continuous improvement of security-related recovery procedures.<br> 5. Qualifications &amp; ExperienceMinimum Qualifications Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security , or a related discipline.<br> CISSP or CISM certification – Mandatory.<br> ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.<br> NCA-related cybersecurity accreditation or certification is preferred.<br> Minimum Experience 8–10 years of professional experience in Information Security / Cybersecurity.<br> At least 3 years of experience in a cybersecurity or information security management/leadership role.<br> Proven experience managing enterprise cybersecurity programs and security teams.<br> Proven experience in GRC, risk management, security operations, and incident response.<br> Proven experience working with regulatory compliance, audits, and cybersecurity frameworks.<br> 6. Technical &amp; Professional Skills The successful candidate should demonstrate: Strong knowledge of cybersecurity frameworks, standards, and best practices.<br> Deep understanding of NCA, PDPL, NDMO, ISO 27001 , and applicable data protection requirements.<br> Strong expertise in Governance, Risk, and Compliance (GRC).<br> Experience with SOC operations and SIEM platforms such as Microsoft Sentinel, Splunk , or equivalent.<br> Strong understanding of vulnerability management and penetration testing.<br> Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP).<br> Strong understanding of IAM and access governance.<br> Knowledge of data protection, data classification, and data governance.<br> Strong understanding of secure architecture and security controls.<br> Ability to develop and monitor cybersecurity KPIs and KRIs.<br> Strong audit and regulatory assessment experience.<br> Ability to assess and communicate cybersecurity risks in terms of business impact.<br> Strong strategic thinking and high-level decision-making capability.<br> Excellent leadership and people-management skills.<br> Ability to manage cross-functional teams and stakeholders under pressure.<br> Strong communication, presentation, and reporting skills.<br> Bilingual proficiency in Arabic and English.<br> 7. Leadership Competencies Strategic Thinking Cybersecurity Leadership Risk-Based Decision Making Stakeholder Management Executive Communication Team Leadership &amp; Development Problem Solving Crisis and Incident Management Governance &amp; Accountability Continuous Improvement Business Acumen Change Management Special Requirements Ability to work effectively in a fast-paced and dynamic environment.<br> Ability to manage cybersecurity incidents and critical security situations.<br> Willingness to participate in security incident response and escalation activities when required.<br> Strong confidentiality and professional integrity.<br> Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders.<br></span> </div>

Company Description Soft Trend is a fast-growing company specializing in software licensing and IT services, focused on delivering state-of-the-art technology solutions. The company aims to become a market leader in information technology by helping partners and clients maximize profits through cost reduction and efficiency improvements. With strong experience in the IT field, Soft Trend is committed to understanding and addressing customer needs and requirements effectively. Team members join an environment that values innovation, client success, and continuous improvement, offering opportunities to work with modern technologies and diverse industries. Role Description The Microsoft Product Officer is a full-time, on-site role based in Cairo, Egypt. This role is responsible for managing the lifecycle of Microsoft products and licensing solutions, including planning, pricing, and portfolio optimization in line with business goals. Day-to-day tasks include analyzing market trends and customer requirements, coordinating with sales and technical teams, and developing product positioning and go-to-market plans. The role also involves monitoring product performance, preparing financial and performance reports, and ensuring compliance with Microsoft licensing policies and standards. The Microsoft Product Officer collaborates with internal stakeholders and external partners to drive product growth, enhance customer satisfaction, and support long-term strategic initiatives.<br>Vendor Relationship Management: Serve as the primary point of contact with Microsoft, maintaining strong communication and alignment on licensing policies, updates, and channel partner programs. Product & Licensing Expertise: Master Microsoft Office licensing structures (CSP, Enterprise, Cloud) to support sales teams with accurate technical and commercial guidance. Account & Channel Support: Assist in structuring client proposals, optimizing license deployments, and ensuring seamless delivery of vendor offerings. Market & Product Analysis: Monitor product updates, price changes, and incentive programs released by Microsoft to maximize profitability and market competitive edge.<br>Qualifications Strong analytical skills to evaluate market data, product performance, and customer needs. Effective communication skills to collaborate with cross-functional teams and present product plans and reports. Solid understanding of finance to manage pricing, margins, and profitability of Microsoft products. Experience in product management, including roadmap development, positioning, and lifecycle management. Project management skills to plan, execute, and monitor product-related initiatives and cross-team activities. Knowledge of Microsoft licensing models, cloud solutions (e.g., Microsoft 365, Azure), and IT service environments. Bachelor’s degree in Business, Information Technology, Computer Science, or a related field; relevant certifications (e.g., Microsoft or project management) are an advantage. Ability to work on-site in Cairo, Egypt, with a focus on ownership, problem-solving, and client-oriented work.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Publication date :</strong> Sep 18, 2026, 12:00AM</p><br><br>Orange Business is here!<br>About us<p>Join us at Orange Business!<br>We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.<br>Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.</p><br><br>About the role<span>In this role, you will be in charge of</span><p><span>As a key player in ensuring confidence in our information security management system, you will be the overall guarantor of the security of our cloud administration infrastructure. You will join the security office and take on the role of delegated CISO for your area (also known as Business Security Officer service). As a Business Security Officer service (BSO service), you'll be constantly on the lookout for threats that could impact your area of responsibility, and your expertise will be the subject of industry-recognized certifications.</span></p><br><br><p><span>At the crossroads of the key issues for the success of the cloud (security and reliability), the Business Security Officer is involved in a wide variety of activities, for which the qualities of analysis and flexibility are essential.</span></p><br><br><p><span>Would you like to find out more? Your mission is diverse (your expertise in all the different fields is not a prerequisite for your application):</span></p><br><br><ul><li><span>Carry out expert assessment and consultancy work (risk analysis, pen-testing, vulnerability audits, etc.)</span></li><li><span>Ensure that Orange builds and operates the service in accordance with management's security requirements.</span></li><li><span>Act as an expert security advisor to operational teams,</span><ul><li><span>In particular, you will set up the necessary documentation and controls,</span></li><li><span>Report on the status of the service in terms of security,</span></li><li><span>Coordinate the management of security incidents,</span></li><li><span>You raise awareness among operational staff and remind them of the safety rules to be followed.</span></li></ul></li><li><span>Helps to continuously improve Orange security practices in conjunction with peers in a logic of control and continuous improvement (Plan-Do-Check-Act).</span></li></ul><br><span>In particular, your mission will focus on security management, thus:</span><ul><li><span>Risk analysis, vulnerability analysis, security assurance plan and indicator monitoring;</span></li><li><span>Follow-up of external audits, implementation of security control points, reviews with cloud operational teams, awareness-raising for these same teams, security reviews, analysis of security incidents and architecture or process analyses for security improvement proposals.</span></li><li><span>Follow-up of action plans linked to the various controls and analyses conducted.</span></li></ul><br>About you<span>About you</span><ul><li><span>Bachelors in engineering or related field with 5+ years in IT/Network/Security operations</span></li><li><span>Knowledge of information security principles and CISSP or CISM best practices.</span></li><li><span>Good understanding of security methods like ISO 27K</span></li><li><span>Demonstrated leadership skills and ability to drive continuous improvement.</span></li><li><span>Exceptional communication, presentation, and stakeholder engagement abilities.</span></li><li><span>Strong analytical, organizational, and critical thinking skills; capable of multitasking.</span></li><li><span>Skilled in risk analysis and reporting for strategic decision-making.</span></li><li><span>Fluent in English; French proficiency is a significant asset.</span></li></ul><br><p>You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.</p><br><br>What we offer<p><strong>• Global Opportunities:</strong> Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.<br><strong>• Flexible Work Environment:</strong> Flexible working hours and possibility to combine work from office and home (hybrid ways of working).<br><strong>• Professional Development:</strong> training programs and upskilling/re-skilling opportunities.<br><strong>• Career Growth:</strong> Internal growth and mobility opportunities within Orange.<br><strong>• Caring and Daring Culture:</strong> Health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events.<br><strong>• Reward Programs:</strong> Employee Referral Program, Change Maker Awards.</p><br><br>Only your skills matterRegardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.<p> At Orange, only your skills matter. </p><br><br> <p> Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have. </p><br><br><br> </div>

About Konecta Konecta is a global leader in Customer Experience (CX) and Business Process Outsourcing (BPO), providing digital transformation, technology, and customer management solutions to leading organizations worldwide. With a strong international presence, Konecta combines technology, data, AI, and human expertise to deliver innovative and scalable solutions for its clients.<br>Hands‑On Fortinet, Palo Alto, Cisco — Network Policies, VPN, Routing, Daily Operations, Security & PCI Compliance Position Overview The Network & Security Engineer supports daily network and security operations across MEA sites. The role requires 1–3 years of hands‑on experience with Fortinet, Palo Alto, and Cisco technologies, including firewall configuration, VPN management, routing, network policies, PCI audit support, and security monitoring. The engineer will handle daily troubleshooting, new site connectivity, and operational monitoring while following IT governance and compliance standards.<br>Key Responsibilities1. Firewall & Security Administration Configure, manage, and troubleshoot Fortinet Forti Gate, Palo Alto, and Cisco ASA/Firepower firewalls. Apply and maintain network security policies, NAT rules, ACLs, segmentation rules, and internet filtering. Configure and monitor IPsec VPN tunnels, SSL VPN, and remote access gateways. Review firewall logs, identify anomalies, and escalate critical security events. Support HA cluster monitoring, failover testing, and firmware updates<br>2. Network Operations & Routing Configure and troubleshoot routing (static routes, policy‑based routing, inter‑VLAN routing). Support daily network operations across MEA offices (LAN/WAN/Wi‑Fi). Perform switch configuration (Cisco/Meraki/Fortinet), VLAN creation, trunking, and port security. Monitor network performance, bandwidth usage, and device health. Assist in network upgrades, patching, and hardware replacements.<br>3. New Sites & New Connections Support deployment of new office sites, including:Firewall setup Routing configuration VPN connectivity Network segmentation Switch and Wi‑Fi setup Coordinate with ISPs for new circuits, IP assignments, and connectivity testing. Validate network readiness and ensure compliance with corporate standards.<br>4. VPN & Remote Access Support Configure and support:Fortinet SSL VPNFortinet IPsec tunnels Palo Alto Global Protect Cisco Any Connect Troubleshoot user VPN access issues and authentication failures. Monitor VPN stability and performance for remote teams.<br>5. Daily Network Troubleshooting Respond to daily network incidents (connectivity issues, latency, packet loss, routing failures). Troubleshoot firewall blocks, policy mismatches, and NAT issues. Resolve switch port issues, DHCP conflicts, and Wi‑Fi connectivity problems. Escalate complex incidents to senior engineers when required.<br>6. Daily Security Activities Monitor firewall security logs for anomalies, blocked traffic, and suspicious patterns. Review alerts from firewalls, SIEM tools, endpoint security platforms, and monitoring dashboards. Validate that critical security policies (internet filtering, access rules, VPN policies) are functioning correctly. Check IPsec/SSL VPN tunnels for uptime, stability, and unusual authentication attempts. Perform daily health checks on firewalls, switches, and network devices (CPU, memory, sessions, link status). Track and respond to security incidents such as unauthorized access attempts or abnormal traffic. Support vulnerability remediation (patching, rule updates, configuration hardening). Maintain daily security documentation (incident logs, rule changes, checklists).<br>7. PCI Compliance, Audits & Scanning Support PCI DSS audit activities, including evidence collection and remediation tasks. Review and respond to PCI vulnerability scans, firewall scans, and penetration test findings. Validate that firewall rules, segmentation, and access controls meet PCI requirements. Ensure secure configuration of network devices in PCI‑scoped environments. Track remediation of PCI findings and coordinate with senior engineers and security teams. Maintain documentation required for PCI audits (network diagrams, rule sets, change logs). Support continuous compliance monitoring and ensure adherence to corporate security standards.<br>8. Documentation & Governance Maintain updated network diagrams, firewall rule documentation, and change logs. Follow IT governance processes for change management and incident reporting. Ensure compliance with corporate security standards, audit requirements, and PCI DSS controls. Document configurations, SOPs, and troubleshooting steps.<br>Qualifications & Experience1–3 years of hands‑on experience in network or security engineering. Strong practical experience with Fortinet Forti Gate configuration and troubleshooting. Experience with Palo Alto (policies, NAT, VPN, Global Protect). Experience with Cisco ASA/Firepower or Cisco networking devices. Solid understanding of routing, VLANs, NAT, VPNs, network policies, and segmentation. Experience supporting daily network operations and troubleshooting. Exposure to PCI DSS, vulnerability scanning, or audit processes is a plus. Familiarity with ITIL processes and ticketing systems.<br>Preferred Certifications Fortinet NSE 3–4 (strongly preferred) Palo Alto PCCSA / PCNSACisco CCNAITIL Foundation (optional) Security+ or similar is a plus Any PCI‑related training or certification is beneficial<br>Soft Skills Strong troubleshooting mindset High attention to detail and accuracy Good communication and teamwork skills Ability to follow procedures and escalate when needed Customer‑focused and proactive attitude Willingness to learn advanced network and security concepts

Job Summary:Responsible for monitoring and analyzing an organization’s security posture on an ongoing basis. Managing SOC team’s goal to detect, analyze, and respond to cybersecurity incidents using a combination of technology solutions and a strong set of processes in order to ensure Maintaining the confidentiality, integrity and availability of business data and protect the bank information<br>Job Responsibilities:Lead SOC team to Act upon security & operational issues/incidents within a 24x7 Managed Security Service Environment. Lead the process of Investigation and analyzing security incidents to determine the root cause, impact, and potential remediation actions. Provide guidance and support to other IT teams and stakeholders on security incident response and remediation. Stay up to date with the latest cybersecurity threats and trends and implement necessary security measures to protect against them. Collaborate with other IT teams and stakeholders to ensure successful incident response and remediation. Propose, analyze, and introduce new technologies or products to increase the information security level (based on defined risks) Coordinate and support the containment and eradication of security incidents. Provide consultancy to internal and external parties in order to reduce the impact of security incidents. Lead SOC team to design/implement/document security operation center processes and procedures. Ensure applying SOC recommended security controls/countermeasures on security devices/system. Create of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. Follow up Incident resolutions for various offenses/incidents. Ensure compliance with SLA, process adherence and process improvisation to achieve security operational center objectives. Lead Security Operation Center team to Perform threat management, threat modelling,Continually assess the overall effectiveness of Security Monitoring solutions. Lead the cyber security threat intelligence and threat hunting activities. <br>Job Qualifications:Bachelor’s degree in computer science or Equivalent Minimum 10 year’s professional IT experience Experience in Information Security Standard “IS0 27xx, PCI”Experience in security device management and SIEMExperience in Security Scans and take required actions/controls

Job Summary We are seeking an experienced Health and Safety Officer to ensure a safe, compliant, and healthy workplace for our team. The role involves implementing safety policies, conducting inspections, investigating incidents, and promoting a strong safety culture across all operations.<br>Key Responsibilities Develop, implement, and maintain Health & Safety policies, procedures, and programs Conduct regular workplace inspections and audits to ensure compliance with legal and internal standards Identify hazards and assess risks, then implement corrective and preventive actions Investigate accidents/incidents/near-misses and recommend improvements to prevent recurrence Ensure proper use, maintenance, and documentation of PPE and safety equipment Monitor training compliance and coordinate health and safety awareness sessions for staff Maintain accurate records, reports, and safety documentation (inspections, incident reports, audits, etc.) Ensure compliance with local OSHA/health & safety regulations and company requirements Liaise with management and relevant contractors to ensure safe work practices Promote safety culture through toolbox talks, coaching, and consistent communication<br>Qualifications & Experience Minimum 2–5 years of experience as a Health & Safety Officer (or similar role) Strong knowledge of workplace safety standards and compliance practices Experience conducting safety inspections, risk assessments, and incident investigations Experience working in operational environments (e.g., manufacturing, construction, logistics, hospitality, or similar) is an advantage Relevant certifications (e.g., OSHA training, NEBOSH/IOSH equivalent, or other recognized safety credential)<br>Skills & Competencies Strong knowledge of safety legislation, risk management, and compliance processes Excellent communication skills with the ability to influence behavior safely Detail-oriented with strong reporting and documentation skills Ability to work independently and make timely, informed safety decisions Strong problem-solving skills and sound judgment Professional, calm demeanor in emergencies or incident investigations Ability to train and motivate teams to follow safety procedures Good organizational skills and time management

Job Purpose:<br>This role serves as the process owner of all assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information in compliance with the organisation's information security policies. A key element of the role is working with management to determine acceptable levels of risk for the organisation. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. The role will also be responsible for the implementation of different security solutions to ensure compliance with the different applicable security and risk standards in the Kingdom of Saudi Arabia and other geographies that we will operate in.<br>Key Accountabilities:<br>Develop, implement, and monitor a strategic, comprehensive enterprise information securityand IT risk management program Full abreast with the SAMA IT risk framework and ensure all implementation is in full compliance with the framework, regulations, and guidelines Work directly with the business units to facilitate risk assessment and risk management processes Develop and enhance an information security management framework Understand and interact with related disciplines through committees to ensure the consistentapplication of policies and standards across all technology projects, systems, and services Provide leadership to the enterprise&#39;s information security organization Advise the leadership team on the appropriate administration of information security standards,assisting them in developing plans within their business units to manage these risks effectivelyby understanding the fundamental aspects of their business objectives. Partner with business stakeholders across the company to raise awareness of riskmanagement concerns Assist with the overall business technology planning, providing current knowledge and futurevision of technology and systems Manage institution-wide information security governance processes, chair the Information Security Advisory Committee and lead Information Security Liaisons in the establishment of aninformation security program and project priorities. Perform risk assessments that address security threats, changes to systems and/orapplications, process improvement initiatives, supplier assessments (including downstreamoutsourcers) and other requests from the business. Develop and implement a comprehensive cloud strategy, selecting between public, private, or hybrid cloud models Oversee the allocation of compute, storage, and networking resources using Infrastructure as Code (IaC) to ensure consistency and prevent & configuration drift". Monitor cloud usage and spending to identify underutilized resources, right-sizing instances toensure the cloud investment remains cost-effective. Establish real-time monitoring and alerting systems to proactively detect and resolveperformance bottlenecks or system failures. Implement robust security protocols, including Identity and Access Management (IAM), dataencryption, and regular audits to maintain compliance with industry standards Establish annual and long-range security and compliance goals, define security strategies,metrics, reporting mechanisms and program services; and create maturity models and aroadmap for continual program improvements. Mature and operationalise various GRC capability areas such as enterprise security riskmanagement, compliance management, policy management, 3rd party risk management, andmetrics and reporting. Drive remediation activities from identification, remediation plan, and closure. Hold ownersaccountable for delivery of remediation solutions within the agreed upon/reasonable SLA. Manage BCP/DRP and Incident Response procedures, tests, and audits. Interface with internal and external auditors to articulate security controls when appropriate. Assess and communicate all security risks associated with purchases or practices performedby the company. Work with internal stakeholders across the business to identify, assess, report, track, andremediate risks and support the development of risk mitigation strategies. Make risk-based decisions and trade-offs impacting annual investment strategies and projectprioritisation. Maintain a strong understanding of risk management methodologies and frameworks. Understand business processes, regulations, and controls and develop meaningful tests toensure controls are operating effectively. Perform operational deep dives on compliance-related processes and systems. Identify, gather, track, and report key risk indicators. Work with partners to identify the root cause of issues. Identify potential risks and develop protocols that staff must follow to reduce or manage those risks. Implementing and overseeing the organisation’s cybersecurity program Aligning cybersecurity and business objectives Maintain PCI compliance of the organisation. Working closely with the cybersecurity team Monitoring Incident Response Activities Managing business continuity and disaster recovery Managing the governance and setup of Cloud Infrastructure Promoting a culture of strong information security Managing vendor relationships Utilising cybersecurity budgets effectively Providing awareness and training<br>Job Requirements:<br>Professional security management certification is mandatory (CISSP/CCSP/CISM/CISA) Degree in business administration or a technology-related (computer science or Computer Engineering) field required. 7+ years of experience in Information/Cybersecurity or IT Risk Management Strong knowledge of Cloud computing/Elastic computing across virtualised environments Minimum of 7 years of experience in a combination of risk management, information security and IT jobs Knowledge of common information security management frameworks, such as ISO/IEC 27001 and NIST. Excellent written and verbal communication skills and high level of personal integrity Innovative thinking and leadership with an ability to lead and motivate cross- functional, interdisciplinary teams Experience with contract and vendor negotiations and management, including managed services. Specific experience in Agile (scaled) software development or other best-in-class development practices.

Job Title: Logistics & Delivery Officer Department: Operations<br>Job Purpose<br>The Logistics & Delivery Officer supports smooth and timely delivery operations at the Fulfillment Center by ensuring order quality, dispatch readiness, driver compliance, and accurate operational reporting. The role focuses on maintaining high delivery standards, identifying operational issues, and supporting efficient last-mile execution.<br>Key Responsibilities<br>Delivery Quality & Accuracy Perform final checks on outgoing orders to ensure quality, accuracy, and proper packaging. Verify recipient details, labeling, cooling requirements, and product condition before dispatch. Identify and report damages, discrepancies, and non-conformities. Dispatch & Delivery Operations Coordinate with the Operations Center Supervisor and drivers to ensure timely dispatch. Support loading activities and ensure orders are handled and arranged securely. Monitor dispatch flow, particularly during peak periods, to minimize delays and missed deliveries. Driver Support & Compliance Brief drivers on delivery priorities, quality standards, and operational requirements. Ensure compliance with delivery SOPs, safety guidelines, and product handling standards. Conduct spot checks on driver readiness, vehicles, uniforms, and delivery equipment. Issue Resolution Identify and escalate delivery quality or operational issues. Support investigations into late, incorrect, or failed deliveries and customer feedback. Assist with corrective actions to prevent recurring issues. Reporting & Documentation Maintain accurate daily records of quality checks, rejected items, discrepancies, and dispatch readiness. Support weekly reporting on delivery performance, quality trends, and operational gaps. Maintain documentation and compliance records to support operational audits.<br>Qualifications & Experience Education Bachelor's degree or diploma in Logistics, Supply Chain, Operations, Business Administration, or a related field. Experience2–4 years of experience in logistics, last-mile delivery, fulfillment, or operational roles. Hands-on experience in fast-paced delivery or fulfillment operations is preferred. Experience working with drivers, dispatch operations, and delivery quality is an advantage. Skills Good understanding of last-mile delivery and dispatch operations. Strong operational and problem-solving skills. Ability to monitor delivery quality and identify operational gaps. Good reporting and Microsoft Excel skills. Knowledge of operational SOPs, quality standards, and compliance requirements. Key Attributes Detail-oriented and quality-focused. Hands-on and comfortable working in a fast-paced fulfillment environment. Strong coordination and communication skills. Able to handle operational issues and priorities effectively.<br>About Floward :<br>Floward Life Page Floward Corporate<br>Founded in 2017, Floward is an online flowers and gifting company; we pride ourselves in creating a seamless experience for our customers and making sending flowers and gifts as enjoyable as receiving them. We source our flowers daily from the best growers and farmers around the world to create one of a kind stunning arrangements and plants that fit every occasion. We also partner with local and international brands to offer a wide range of gifts including chocolate, perfumes, cakes and more, coupled with our arrangements to create the perfect gift. Operating in 36 cities in nine countries across the MENA region and UK, we guarantee same-day delivery across the board through our own refrigerated fleet to ensure our arrangements arrive fresh to the customer.

About us:<br><br>At MTS (Misr Technology Services), we aren't just building software; we are building the digital backbone of Egypt’s global trade. As the architects behind Nafeza, Egypt’s National Single Window for Foreign Trade, we’ve taken on the monumental task of consolidating and automating the country’s entire trade ecosystem into one highperformance, unified platform.<br><br>Job Summary:<br><br>The Junior Information Security Analyst supports the organization’s Information Security and Cybersecurity posture by assisting in monitoring, analyzing, and improving security controls across the MTS environment.<br><br>This role is entry to mid-level and focuses on learning, supporting daily security operations, and assisting senior team members in identifying vulnerabilities, investigating alerts, and implementing security best practices.<br><br>The incumbent will work closely with internal IT teams, vendors, and stakeholders to ensure timely and effective handling of security-related tasks while developing technical and analytical skills in cybersecurity.<br><br>Responsibilities:<br><br>Assist in monitoring security tools and systems to detect and respond to alerts Support vulnerability assessments and basic security reviews Assist in analyzing security threats and incidents under supervision Help in reviewing application security practices and identifying basic gaps Support Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) activities Work with Application Engineering teams to follow secure coding practices Assist in reviewing user access and supporting access control processes Participate in incident response activities and documentation Support preparation of security reports and dashboards Help maintain and update security policies, procedures, and documentation Participate in security awareness initiatives and training programs Collaborate with Security Operations Center (SOC) in monitoring and initial analysis of alerts Stay updated on basic cybersecurity trends, threats, and vulnerabilities Follow documented procedures to support incident handling and remediation activities<br><br>Qualifications:<br><br>0–2 years of experience in IT or Information Security (internships count) Bachelor’s degree in Computer Science, Information Systems, or related field Entry-level certifications are a plus (e.g., Security+, CEH, e JPT) Willingness to pursue advanced certifications (e.g., CISSP, OSCP) in the future0–2 years of experience in IT or Information Security (internships count) Basic understanding of Information Security concepts and principles Familiar with OWASP Top 10 (basic knowledge) Basic knowledge of SAST / DAST concepts Basic understanding of Identity and Access Management (IAM) Familiar with general IT infrastructure (networks, systems) Basic knowledge of cybersecurity frameworks (e.g., NIST – awareness level) Willingness to learn and develop in the cybersecurity field Good analytical and problem-solving skills Good communication skills (written and verbal) Ability to work in a team environment<br><br>Powered by Jazz HR<br><br>f YYTSra SA2

<p>Security Infrastructure Management: Deploy, configure, and maintain enterprise next-generation firewalls (NGFW), intrusion prevention systems (IPS/IDS), VPN gateways, and web application firewalls (WAF). Network Access &amp; Segmentation: Implement Network Access Control (NAC), zero-trust architecture, and strict micro-segmentation across corporate headquarters, primary/disaster recovery data centers, and remote branch networks. Monitoring &amp; Incident Response: Continuously monitor network traffic for anomalous behavior, coordinate with the Security Operations Center (SOC), and lead technical remediation during network security incidents. Policy Enforcement &amp; Auditing: Develop, maintain, and audit firewall rule bases, access control lists (ACLs), and site-to-site VPN tunnels. Ensure all network changes follow formal change management procedures. Secure Infrastructure Projects: Partner with Cloud, Infrastructure, and Application teams to architect secure connectivity for new digital banking services, mobile applications, and third-party integrations. Regulatory Compliance: Ensure all network security controls strictly align with Central Bank of Egypt (CBE) cybersecurity directives, PCI-DSS requirements, and ISO 27001 standards. Vulnerability Remediation: Conduct regular network vulnerability scans, review penetration testing findings, and patch or harden network appliances accordingly.</p><p><strong>Desired Candidate Profile</strong></p><p>Bachelor s degree in Information Technology, Computer Science, Engineering, or a related field from a reputable university. 4 5 years of hands-on experience in data center security technologies. Proven hands-on experience with data center security technologies, including Next-Generation Firewalls (NGFW), Web Application Firewalls (WAF), F5 Load Balancers, VPN technologies, IDS/IPS, and network segmentation. Experience with security solutions from leading vendors such as Palo Alto, Fortinet, F5, Cisco, or equivalent. Strong knowledge of routing, switching, TCP/IP, and network security best practices. Demonstrated experience in implementing, configuring, and troubleshooting security solutions within enterprise environments. Excellent analytical, problem-solving, troubleshooting, and communication skills. Relevant professional certifications are preferred.</p>

<p><span >The Senior Data Governance Officer is responsible for developing, implementing, and enforcing organizational data governance frameworks, policies, and standards that ensure data is managed securely, ethically, and in compliance with global regulations. This role serves as the primary steward of IFRC's data governance program, translating strategic governance objectives into practical policies, processes, and procedures that enable safe, ethical data utilization across the organization and protect vulnerable populations. The Data Governance Officer will establish data governance structures, manage roles and responsibilities, consider any applicable regulatory compliance, to assist with improving data quality and security, and foster a culture of data responsibility aligned with IFRC's humanitarian principles and commitment to privacy and dignity. The incumbent will support in developing the organizational approach to the distribution of data capabilities and roles.</span></p><p><strong>Data Governance Framework &amp; Strategy</strong></p><ul><li>Design and implement comprehensive organizational data governance framework, including policies, standards and compliance requirements, aligned with organizational strategy, humanitarian principles, and relevant requirements</li><li>Develop governance roadmaps outlining phased implementation of policies, standards, and controls with clear milestones and success metrics</li><li>Establish governance scope, identifying critical data assets, stakeholder roles, and organizational priorities requiring governance attention</li><li>Create and maintain governance policies covering data classification, ownership, stewardship, quality, security, access, and lifecycle management</li><li>Develop governance principles reflecting IFRC's humanitarian values, including principles of data protection, dignity, transparency, and accountability</li></ul><p><strong>Data Classification and Sensitivity Management</strong></p><ul><li>Develop classification standards and guidance for categorizing data based on sensitivity, criticality, and relevant requirements</li><li>Design and implement sensitivity labeling strategies using Microsoft Information Protection and related tools integrated within Microsoft Fabric and Purview</li><li>Create clear labeling guidelines that are easily understood across the organization</li></ul><p><strong>Data Privacy and Compliance</strong></p><ul><li>Support the Data Protection Office with implementation of IFRC s Policy on the Protection of Personal Data</li><li>Support Data Protection Officer (DPO) with governance policy input, and compliance documentation</li><li>Support Data Protection Impact Assessment (DPIA) processes for new data initiatives, ensuring privacy by design principles</li><li>Draft incident response and data breach protocols in coordination with the DPO and CISO, ensuring timely notification and mitigation in accordance with relevant requirements</li></ul><p><strong>Roles, Responsibilities and Accountability</strong></p><ul><li>Establish, assign and document organizational data governance structure with clear role definitions (Data Owners, Data Stewards, Data Custodians, Data Users) and create related RACI matrices</li><li>Support in the development of organizational approach to distribute Data, Analytics and AI capabilities and roles, across dimensions back-end, supporting and front-end as well as centralized, decentralized and emerging roles.</li><li>Provide steward training and onboarding covering governance policies, data quality management, compliance, and communication expectations</li><li>Establish governance committees and forums (e.g., Data Governance Council, domain steward groups) to facilitate coordination and decision-making</li><li>Monitor role performance and accountability, providing coaching and support to ensure effective governance execution</li></ul><p><strong>Data Quality Standards and Monitoring</strong></p><ul><li>Define organizational data quality standards and dimensions (accuracy, completeness, consistency, timeliness, validity, uniqueness)</li><li>Establish and automate data quality metrics, rules and validation checks aligned with business use cases and decision-making requirements</li><li>Develop data quality assessment and monitoring protocols identifying critical data assets and quality requirements</li><li>Establish data quality governance processes including issue identification, escalation, resolution, and continuous improvement</li><li>Monitor data quality metrics, reporting on trends and issues to governance committees and data stewards</li></ul><p><strong>Asset Inventory and Cataloging</strong></p><ul><li>Oversee the development and maintenance of enterprise data asset inventory</li><li>Establish standards for data asset documentation including business definitions, data lineage, and usage guidance</li><li>Implement and maintain Microsoft Purview data catalog systems for centralized data asset discovery, classification, and governance</li><li>Coordinate cataloging activities across the organization, ensuring data assets are properly documented and discoverable</li><li>Monitor catalog usage and provide training to support effective data discovery and asset management</li></ul><p><strong>Access Management and Information Security</strong></p><ul><li>Develop guidelines for secure information sharing with internal teams, partners, vendors, and external stakeholders, including third-party information sharing agreements</li><li>Build and maintain tools and automation to monitor and audit access patterns, investigating and addressing potential violations of access governance policies</li><li>Support implementation of technical security and privacy controls including access controls (including row and column access controls), encryption, pseudonymization, anonymization, and masking where appropriate</li><li>Coordinate with cybersecurity teams on access controls in Microsoft Fabric and related platforms</li></ul><p><strong>Governance Policy Development and Maintenance</strong></p><ul><li>Create and implement data governance policies addressing data collection, processing, storage, access, sharing, retention, and deletion</li><li>Develop policies specific to sensitive data categories (examples: beneficiary data, health information, location data) with appropriate safeguards</li><li>Monitor policy compliance, investigating deviations and implementing corrective actions</li><li>Maintain policy library and version control, ensuring staff access current guidance</li></ul><p><strong>Desired Candidate Profile</strong></p><p>The Senior Data Governance Officer is responsible for developing, implementing, and enforcing organizational data governance frameworks, policies, and standards that ensure data is managed securely, ethically, and in compliance with global regulations. This role serves as the primary steward of IFRC's data governance program, translating strategic governance objectives into practical policies, processes, and procedures that enable safe, ethical data utilization across the organization and protect vulnerable populations. The Data Governance Officer will establish data governance structures, manage roles and responsibilities, consider any applicable regulatory compliance, to assist with improving data quality and security, and foster a culture of data responsibility aligned with IFRC's humanitarian principles and commitment to privacy and dignity. The incumbent will support in developing the organizational approach to the distribution of data capabilities and roles.</p><ul><li>Design and implement comprehensive organizational data governance framework, including policies, standards and compliance requirements, aligned with organizational strategy, humanitarian principles, and relevant requirements</li><li>Develop governance roadmaps outlining phased implementation of policies, standards, and controls with clear milestones and success metrics</li><li>Establish governance scope, identifying critical data assets, stakeholder roles, and organizational priorities requiring governance attention</li><li>Create and maintain governance policies covering data classification, ownership, stewardship, quality, security, access, and lifecycle management</li><li>Develop governance principles reflecting IFRC's humanitarian values, including principles of data protection, dignity, transparency, and accountability</li><li>Develop classification standards and guidance for categorizing data based on sensitivity, criticality, and relevant requirements</li><li>Design and implement sensitivity labeling strategies using Microsoft Information Protection and related tools integrated within Microsoft Fabric and Purview</li><li>Create clear labeling guidelines that are easily understood across the organization</li><li>Support the Data Protection Office with implementation of IFRC s Policy on the Protection of Personal Data</li><li>Support Data Protection Officer (DPO) with governance policy input, and compliance documentation</li><li>Support Data Protection Impact Assessment (DPIA) processes for new data initiatives, ensuring privacy by design principles</li><li><br></li></ul>

JOB PURPOSE<br>Responsible for implementing and maintaining HDBank information security systems and technologies.<br>Job Responsibilities:<br>Maintain IT security controls documentation. Recognize the security gaps and prepare an action plan. Open support tickets and resolve issue. Responsible for information security projects and makes sure they meet information security objectives. Responsible for providing security during the development stages of software systems, networks and data centers. Develop plans to safeguard computer files against unauthorized modification, destruction or disclosure Perform vulnerability assessments and remediation actions<br>Job Qualifications: <br>Bachelor's Engineering or Computer Science Minimum 3+ years of IT and relevant security experience

KEY ACCOUNTABILITIES: <br>Monitor Wallet, E-banking, and Debit Cards transactions for suspicious behavior. Check all alerts from VISA Risk manager and Master Card event manager as risk tool controlled by rules for suspicious behavior transactions. Cooperation with banks, Visa, Master Card and fraud forum to minimize fraud losses for our bank. Make sure to receive all fraud credit card transactions on monthly basis from NI. Create, monitoring and analyze POS merchant statement and reports. Monitor E-commerce transactions through (MIGS – MPGS - Cyber Source). Review daily downloaded MEEZA transactions that taken place at AAIB merchants. Analyzing activities and identifying suspicious transactions then taking necessary action procedures. Collecting all necessary information and documents, in case of Issuer banks investigation requests. In addition, communicate with the merchants then respond to the issuer’s banks Follow and implement all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner<br><br>QUALIFICATIONS, EXPERIENCE & SKILLS: <br>Minimum Qualifications:Bachelor’s degree in business administration, finance, accounting or any relevant discipline<br>Minimum Experience: For the officer: 0 to 4 years banking experience. Forgery & counterfeiting training course is a plus Updated with recent Visa and MC mandates and regulations<br>Job-Specific Skills:Very good analysis skills. Communicate effectively in oral & written form with other departments. Outstanding Computer skills. Good time management skills.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Information Security &amp; Risk Manager1. Job Details<p><strong>Position Title:</strong> Information Security &amp; Risk Manager<br><strong>Department:</strong> Technology Services / IT<br><strong>Reports To:</strong> Information Security / CTO<br><strong>Employment Type:</strong> Permanent<br><strong>Location:</strong> Maadi, Degla – On-site<br><strong>Grade:</strong> As per organizational structure<br><strong>Direct Reports:</strong> As per approved organizational structure</p><br>2. Job Purpose<p>The Information Security &amp; Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function. The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.</p><br><p>The role provides strategic and operational leadership across <strong>Information Security Governance, Risk &amp; Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness</strong>.</p><br>3. Key Accountabilities &amp; Deliverables<p>The role will be accountable for the development, implementation, and continuous improvement of:</p><br><ul><li>Information Security Strategy and Cybersecurity Roadmap</li><li>Information Security policies, standards, procedures, and guidelines</li><li>Information Security Management System (ISMS)</li><li>Enterprise IT and Cybersecurity Risk Register</li><li>Information Security Risk Assessment Reports</li><li>Risk Treatment and Remediation Plans</li><li>Security Compliance Reports, including ISO 27001 and applicable regulatory requirements</li><li>Cybersecurity Control Framework and Control Effectiveness Reports</li><li>Vulnerability Assessment and Penetration Testing (VAPT) Reports</li><li>Cybersecurity Incident Reports and Root Cause Analysis (RCA)</li><li>Security Monitoring and Threat Dashboards</li><li>Cybersecurity KPI and KRI Dashboards</li><li>Identity and Access Management (IAM) Policies, Models, and Access Matrices</li><li>Data Classification and Data Protection Framework</li><li>Internal and External Audit Reports and Evidence Repository</li><li>Audit Findings and Remediation Tracking</li><li>Business Continuity and Disaster Recovery (BCP/DR) Security Alignment</li><li>Security Awareness and Training Programs and Reports</li><li>Regulatory Assessments, submissions, and compliance evidence</li></ul>4. Key ResponsibilitiesA. Information Security Strategy &amp; Governance<ul><li>Define, develop, and execute the organization’s Information Security Strategy and cybersecurity roadmap.</li><li>Own and continuously improve the Information Security Management System (ISMS).</li><li>Develop and maintain information security policies, standards, procedures, and guidelines.</li><li>Establish effective cybersecurity governance frameworks aligned with business objectives.</li><li>Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership.</li><li>Establish and monitor security KPIs, KRIs, and performance metrics.</li><li>Ensure information security requirements are incorporated into technology initiatives, projects, and business processes.</li></ul>B. Information Security Risk Management<ul><li>Lead regular information security and cybersecurity risk assessments across the organization.</li><li>Own and maintain the enterprise IT and cybersecurity risk register.</li><li>Identify, assess, prioritize, and communicate information security risks.</li><li>Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure.</li><li>Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies.</li><li>Translate technical cybersecurity risks into business impact and communicate them effectively to senior management.</li><li>Monitor the organization’s overall cyber risk profile and provide recommendations for risk reduction.</li></ul>C. Security Operations &amp; SOC<ul><li>Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers.</li><li>Ensure effective security monitoring, threat detection, investigation, and response capabilities.</li><li>Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies.</li><li>Establish and monitor security incident management processes.</li><li>Review security alerts, incidents, trends, and threat intelligence.</li><li>Ensure appropriate escalation and response mechanisms are in place for critical security events.</li><li>Monitor and improve the effectiveness of security controls and operational processes.</li></ul>D. Cybersecurity Incident Response<ul><li>Lead the organization’s cybersecurity incident response capability.</li><li>Ensure effective detection, containment, eradication, recovery, and post-incident activities.</li><li>Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP).</li><li>Conduct regular incident response exercises and simulations.</li><li>Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed.</li><li>Track corrective and preventive actions resulting from security incidents.</li><li>Ensure lessons learned are incorporated into security controls and processes.</li></ul>E. Governance, Risk &amp; Compliance<ul><li>Lead Information Security Governance, Risk, and Compliance (GRC) activities.</li><li>Ensure compliance with applicable regulatory and industry requirements, including:<ul><li>National Cybersecurity Authority (NCA) requirements</li><li>Saudi Personal Data Protection Law (PDPL)</li><li>National Data Management Office (NDMO) requirements, where applicable</li><li>ISO/IEC 27001</li><li>Other applicable cybersecurity and data protection regulations</li></ul></li><li>Coordinate internal and external security audits and assessments.</li><li>Manage audit evidence collection and maintain an organized security evidence repository.</li><li>Track audit findings, remediation plans, and closure status.</li><li>Prepare management and regulatory compliance reports.</li><li>Support regulatory assessments, reviews, and submissions as required.</li></ul>F. Data Protection &amp; Privacy<ul><li>Establish and maintain data protection and information classification frameworks.</li><li>Ensure appropriate security controls are implemented for sensitive and personal data.</li><li>Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements.</li><li>Establish appropriate data access, handling, retention, and protection controls.</li><li>Support privacy and data protection risk assessments where required.</li></ul>G. Vulnerability &amp; Security Testing<ul><li>Oversee vulnerability management activities across IT environments.</li><li>Coordinate Vulnerability Assessments and Penetration Testing (VAPT).</li><li>Review vulnerability and penetration testing reports.</li><li>Ensure security vulnerabilities are appropriately prioritized based on business risk.</li><li>Track remediation activities and validate closure of critical and high-risk vulnerabilities.</li><li>Ensure security testing is incorporated into relevant technology projects and systems.</li></ul>H. Identity &amp; Access Management<ul><li>Establish and maintain IAM policies, standards, and access control frameworks.</li><li>Ensure appropriate access governance and segregation of duties.</li><li>Review privileged access and high-risk accounts.</li><li>Support periodic user access reviews and access recertification.</li><li>Ensure access controls align with business requirements and security policies.</li></ul>I. Security Awareness &amp; Culture<ul><li>Develop and implement an organization-wide security awareness program.</li><li>Lead cybersecurity awareness campaigns and security training.</li><li>Implement phishing simulation and social engineering awareness programs.</li><li>Monitor employee security awareness performance and identify improvement areas.</li><li>Promote a strong cybersecurity culture across all business functions.</li></ul>J. Business Continuity &amp; Disaster Recovery<ul><li>Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans.</li><li>Participate in BCP/DR risk assessments and exercises.</li><li>Ensure critical systems have appropriate security, recovery, and resilience controls.</li><li>Support testing and continuous improvement of security-related recovery procedures.</li></ul>5. Qualifications &amp; ExperienceMinimum Qualifications<ul><li>Bachelor’s degree in <strong>Information Technology, Computer Science, Cybersecurity, Information Security</strong>, or a related discipline.</li><li><strong>CISSP or CISM certification – Mandatory.</strong></li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.</li><li>NCA-related cybersecurity accreditation or certification is preferred.</li></ul>Minimum Experience<ul><li><strong>8–10 years of professional experience in Information Security / Cybersecurity.</strong></li><li>At least <strong>3 years of experience in a cybersecurity or information security management/leadership role.</strong></li><li>Proven experience managing enterprise cybersecurity programs and security teams.</li><li>Proven experience in GRC, risk management, security operations, and incident response.</li><li>Proven experience working with regulatory compliance, audits, and cybersecurity frameworks.</li></ul>6. Technical &amp; Professional Skills<p>The successful candidate should demonstrate:</p><br><ul><li>Strong knowledge of cybersecurity frameworks, standards, and best practices.</li><li>Deep understanding of <strong>NCA, PDPL, NDMO, ISO 27001</strong>, and applicable data protection requirements.</li><li>Strong expertise in Governance, Risk, and Compliance (GRC).</li><li>Experience with SOC operations and SIEM platforms such as <strong>Microsoft Sentinel, Splunk</strong>, or equivalent.</li><li>Strong understanding of vulnerability management and penetration testing.</li><li>Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP).</li><li>Strong understanding of IAM and access governance.</li><li>Knowledge of data protection, data classification, and data governance.</li><li>Strong understanding of secure architecture and security controls.</li><li>Ability to develop and monitor cybersecurity KPIs and KRIs.</li><li>Strong audit and regulatory assessment experience.</li><li>Ability to assess and communicate cybersecurity risks in terms of business impact.</li><li>Strong strategic thinking and high-level decision-making capability.</li><li>Excellent leadership and people-management skills.</li><li>Ability to manage cross-functional teams and stakeholders under pressure.</li><li>Strong communication, presentation, and reporting skills.</li><li><strong>Bilingual proficiency in Arabic and English.</strong></li></ul>7. Leadership Competencies<ul><li>Strategic Thinking</li><li>Cybersecurity Leadership</li><li>Risk-Based Decision Making</li><li>Stakeholder Management</li><li>Executive Communication</li><li>Team Leadership &amp; Development</li><li>Problem Solving</li><li>Crisis and Incident Management</li><li>Governance &amp; Accountability</li><li>Continuous Improvement</li><li>Business Acumen</li><li>Change Management</li></ul>Special Requirements<ul><li>Ability to work effectively in a fast-paced and dynamic environment.</li><li>Ability to manage cybersecurity incidents and critical security situations.</li><li>Willingness to participate in security incident response and escalation activities when required.</li><li>Strong confidentiality and professional integrity.</li><li>Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders.</li></ul> </div>

Company Description:<br> Xceed is a leading multilingual Business Process Outsourcing (BPO) provider in the EMEA region, operating more than 10,000 web-enabled multichannel stations. The company supports government and commercial clients in 10 different languages, delivering inbound, outbound, back-office, helpdesk, social media analysis, and recruitment process outsourcing services. Xceed has operational sites in Egypt, Morocco, Mauritius, UAE, and a new site in Saudi Arabia, providing diverse career opportunities across locations. The organization is recognized with multiple global awards for outsourcing excellence, customer experience, sustainability, and diversity, equity, and inclusion. Xceed also maintains several international certifications, including COPC and ISO standards, underscoring its commitment to quality, security, and business continuity.<br><br>Role Description:<br>The Quality Monitoring Specialist (Call Center Experience) is a full-time, on-site role based in Qesm El Maadi. This role is responsible for monitoring and evaluating customer interactions across various channels to ensure adherence to quality standards, scripts, and compliance requirements. The specialist will conduct regular call and case audits, document findings, and provide clear feedback and coaching insights to support performance improvement. Day-to-day tasks include preparing quality reports and dashboards, identifying trends and root causes of service issues, and collaborating with operations, training, and management teams to implement corrective and preventive actions. The role also involves contributing to the enhancement of quality monitoring tools and processes, and supporting calibration sessions to maintain consistent evaluation criteria.<br><br>Qualifications:<br>- Call center experience in telecommunication field (Vodafone – Orange – EX WE- Vodafone UK- AT&T - etc.<br><br>-Experience as a Quality Analyst is 6 months <br><br>-Excellent in the English language.<br><br>Work Location: Maadi, Technology Park

Job Responsibilities:Manage and supervise the cyber security presales engineering team, providing guidance, coaching, and technical leadership. Ensure high-quality technical proposals, solution architectures, and responses to RFPs/RFIs. Oversee client workshops, technical meetings, solution presentations, and proof of-concept activities. Validate all proposed solutions to ensure they meet client needs, regulatoryrequirements, and industry best practices. Coordinate with sales, delivery, operations, and BI teams to align solutions, pricing, and scope. Maintain strong relationships with key customers, partners, and vendors to enhance solution capabilities. Monitor industry trends, security threats, emerging technologies, and vendor roadmaps to keep the unit’s offerings up to date. Establish technical standards, documentation practices, and presales workflows within the cyber security unit. Support the Director in developing business strategies, portfolio planning, and revenue growth initiatives. Evaluate team performance, plan resource allocation, and identify training and certification needs. Ensure knowledge transfer to implementation teams for smooth project execution. Participate in complex or strategic opportunities requiring senior-level technical expertise.<br>Required Qualifications:Bachelor's degree in computer engineering, Computer Science, Information Technology, Electronics & Communications Engineering, or a related technical field. From 7–8 years of experience in cyber security with at least 3 years in presales or solution architecture. Strong technical expertise in enterprise security solutions (network security, endpoint, SIEM/SOC, IAM, cloud security, etc.). Solid understanding of compliance frameworks and standards (ISO 27001, NIST,GDPR, PCI-DSS). Proven experience leading technical teams and managing presales activities Excellent communication, presentation, and stakeholder management skills. Strategic mindset with strong analytical and problem-solving abilities.