وظائف مفتش أمن - القاهرة مصر
٢٣٤٧ وظائف شاغرة
<p><h4>ملف الدور</h4>
<p>إجراء تقييمات ومراجعات منتظمة للأمن السيبراني لـ Vodafone Cash ولمنتجات التكنولوجيا المالية الأخرى.<br>
تطوير وتنفيذ سياسات وإجراءات وضوابط الأمن السيبراني الخاصة بخدمات النقود عبر الهاتف المحمول.<br>
مراقبة والإبلاغ عن مقاييس وأداءات الأمن السيبراني ومؤشرات الأداء الرئيسية لـ Vodafone Cash ولمنتجات التكنولوجيا المالية الأخرى.<br>
إدارة المخاطر للنقد ومنتجات التكنولوجيا المالية.<br>
تحديد وتقييم والتخفيف من مخاطر الأمن السيبراني المرتبطة بـ Vodafone Cash وغيره من منتجات التكنولوجيا المالية.<br>
تطوير وتنفيذ أطر واستراتيجيات إدارة مخاطر الأمن السيبراني.<br>
إجراء تقييمات التهديدات ونقاط الضعف لـ Vodafone Cash وغيرها من منتجات التكنولوجيا المالية.<br>
التأكد من تنفيذ تدابير حماية البيانات، بما في ذلك تشفير البيانات، وضوابط الوصول، ومنع فقدان البيانات.<br>
تقييم موقف الأمن السيبراني للمورّدين وأطراف الشركاء من الأطراف الثالثة المشاركين في Vodafone Cash وغيرها من منتجات التكنولوجيا المالية.<br>
التعامل مع مخاطر الأمن السيبراني المرتبطة بالعلاقات مع الغير.<br>
تطوير وتقديم برامج توعية بالأمن السيبراني للموظفين المشاركين في Vodafone Cash وغيره من منتجات التكنولوجيا المالية.</p>
<h4>الكفاءات والمؤهلات</h4>
<ul>
<li>شهادات في الأمن السيبراني (مثلاً CISSP، CISM، CISA، ISO27001).</li>
<li>معرفة جيدة جداً بـ PCI-DSS.</li>
<li>خبرة في صناعة التكنولوجيا المالية، مع تركيز على خدمات النقود عبر الهاتف المحمول، لا تقل عن سنتين.</li>
<li>معرفة بمنتجات وخدمات fintech محددة، بما فيها المحافظ الرقمية وأنظمة الدفع.</li>
<li>مهارات للتقارير وإدارة المشاريع تعتبر ميزة.</li>
<li>فهم جيد لأمن الشبكات النقالة ونقاط الضعف.</li>
<li>يجب أن يمتلك مؤهلات تقنية ومهنية:</li>
<ul>
<li>درجة البكالوريوس في الهندسة أو علوم الحاسب.</li>
<li>فهم قوي لأطر ومعايير الأمن السيبراني (مثل ISO 27001، PCI-DSS، NIST Cybersecurity Framework).</li>
<li>معرفة عميقة بتهديدات الأمن السيبراني ونقاط الضعف والتدابير المضادة.</li>
<li>إتقان أدوات وتكنولوجيات الأمن السيبراني.</li>
<li>مهارات تحليلية وحل مشكلات قوية.</li>
<li>دقة واهتمام بالتفاصيل.</li>
<li>قدرة على التواصل بشكل فعال مع كل من أصحاب المصلحة التقنيين وغير التقنيين.</li>
<li>مهارات تواصل وتعاون عالية.</li>
</ul>
</ul>
<h4>انضم إلينا</h4>
<p>في فودافون، نحن لا شكل مستقبل الاتصال لعملائنا فحسب، بل نشكّل المستقبل للجميع الذين ينضمون إلى فريقنا. عندما تعمل معنا، أنت جزء من مهمة عالمية لربط الناس، وحل تحديات معقدة، وخلق عالم أكثر استدامة وشمولاً. إذا كنت تريد تطوير مسيرتك المهنية مع تحقيق توازن مثالي بين العمل والحياة، توفر فودافون الفرص التي تساعدك على الانتماء وتحقيق تأثير حقيقي.</p>
<h4>ليس تناسبك المثالي؟</h4>
<p>هل تقلق من أنك لا تستوفي جميع المعايير المطلوبة كما هي بالضبط؟ في فودافون نحن شغوفون بتمكين الناس وخلق مكان عمل يمكن للجميع الازدهار فيه بغض النظر عن خلفيتهم الشخصية أو المهنية. إذا كنت متحمساً لهذا الدور لكن خبرتك لا تتوافق بالضبط مع كل جزء من الوصف الوظيفي، فنحن نشجعك على التقديم فقد تكون المرشح المناسب لهذا الدور أو لفرصة أخرى.</p>
<h4>من نحن</h4>
<p>نحن شركة اتصالات دولية رائدة نخدم ملايين العملاء. في فودافون، نؤمن أن الاتصال قوة للخير. إذا استخدمناه للأشياء التي تهم حقاً، يمكنه تحسين حياة الناس والعالم من حولهم. من خلال تقنياتنا نُمكّن الناس، نوصل الجميع بغض النظر عن هويتهم أو مكان إقامتهم ونحمي الكوكب، مع مساعدة عملائنا على فعل الشيء نفسه.</p>
<p>الانتماء في فودافون ليس مفهوماً؛ إنه يعيش ويتنفس ويُزرع من خلال كل ما نقوم به. ستكون جزءاً من مجتمع عالمي متنوع، مع العديد من العقول والقدرات والخلفيات والثقافات المختلفة. نحن ملتزمون بزيادة التنوع، وضمان التمثيل المتكافئ، وجعل فودافون مكاناً يشعر فيه الجميع بالأمان والتقدير والشمول.</p>
<h4>سهولة الوصول</h4>
<p>إذا كنت تتطلب أي تعديلات معقولة أو لديك طلب وصول كجزء من رحلة التوظيف الخاصة بك، على سبيل المثال، وقت إضافي أو فترات استراحة بين التقييمات عبر الإنترنت، يرجى الرجوع إلى إرشادات تعديل الطلب في الشركة للدعم.</p>
<p>معاً نستطيع.</p></p><p></p>
<p><h4>ملخص المنصب</h4>
<p>استطلاع جميع مناطق الملكية؛ مساعدة الضيوف في الوصول إلى الغرفة. مراقبة التلفزيون بنظام الدائرة المغلقة، ونظام إنذار المحيط، وإنذارات الاشتباه، ونظام سلامة الحياة من الحريق. إغلاق مداخل الملكية عند الحاجة. إجراء فحوصات مخاطر جسدية يومية. الاستجابة للحوادث، الاتصال بخدمات الطوارئ الطبية EMS أو تقديم الإسعاف/الإنعاش القلبي الرئوي عند الحاجة. مساعدة الضيوف/الموظفين خلال حالات الطوارئ. إبلاغ الأفراد المناسبين في حال وقوع حوادث أو هجمات أو حوادث أخرى. تفكيك الاضطرابات التي تحدث من الضيوف/الموظفين. طلب مساعدة خارجية إذا لزم الأمر. إكمال تقارير incidents لتوثيق جميع الحوادث المتعلقة بالأمن/منع الخسائر. التعامل مع جميع الانقطاعات والشكاوى. حل حالات مخاطر السلامة. مرافقة أي أشخاص غير مرحب بهم من الملكية دون تعطيل سير العمل المنظم للملك. الإبلاغ عن مشاهد حوادث المركبات/السرقات. طلب المساعدة باستخدام الاستجابات الرمزية الصحيحة. إكمال ملخص وردية منع الخسائر/تقرير النشاط اليومي. الحفاظ على سرية جميع تقارير/وثائق الأمن/منع الخسائر والملك؛ إطلاق المعلومات فقط للأشخاص المصرح لهم. إجراء التحقيقات وجمع الأدلة. إجراء المقابلات مع الأطراف المعنية.</p>
<p>اتبع</p><p></p>
<p><h4>انضم إلينا</h4>
<p>في فودافون، لا نعمل فقط على تشكيل مستقبل الاتصال لعملائنا – بل نُكوّن المستقبل للجميع الذين ينضمون إلى فريقنا. عندما تعمل معنا، فأنت جزء من مهمة عالمية لربط الناس، وحل التحديات المعقدة، وخلق عالم أكثر استدامة وشمولاً. إذا كنت تريد نمو مسيرتك المهنية مع إيجاد التوازن الأمثل بين العمل والحياة، فوفودافون توفر لك الفرص لتشعر بالانتماء وتترك تأثيراً حقيقياً.</p>
<h4>هدف الدور</h4>
<p>تقييم احتياجات الأعمال لدى العملاء ووضع الرؤية التقنية الشاملة لحل محدد لمشكلة عمل سواء كانت أنظمة كمبيوتر، شبكات، أجهزة أو برمجيات.</p>
<h4>الأنشطة الأساسية وملكيات القرار</h4>
<ul>
<li>فهم مشكلات العمل وتحليلها وتوثيقها وتحويلها إلى حلول تقنية</li>
<li>قيادة مناقشات تصميم الهندسة المعمارية ومراجعاتها وتوصياتها لتلبية متطلبات العميل واحتياجاته</li>
<li>تطوير حلول أمان شاملة لضمان القابلية للتوسع والتوافق مع متطلبات العميل</li>
<li>إجراء تقييمات تقنية تفصيلية لبيئات العملاء لتحديد الثغرات والفرص</li>
<li>تصميم حلول يستفيد من فهم عميق لمنهجيات وأفضل الممارسات الأمنية</li>
<li>التعاون مع فرق المبيعات لفهم متطلبات العميل، وتقديم التوجيه التقني، والمساهمة في تطوير المقترحات</li>
<li>إعداد وتقديم عروض ومقدمات تقنية مقنعة للعملاء، مع إبراز قيمة الحلول المقترحة</li>
<li>الاستجابة لطلبات العطاءات/المناقصات/الطلبات التقنية، مع ضمان الدقة التقنية والموقع التنافسي</li>
<li>العمل كمستشار تقني للعملاء لبناء الثقة وفهم احتياجاتهم البنية التحتية طويلة الأجل</li>
<li>العمل عن كثب مع فرق التنفيذ الداخلية لضمان جدوى الحلول المقترحة وتوافقها مع قدرات التنفيذ</li>
<li>المتابعة المستمرة لأحدث التقنيات والاتجاهات الصناعية والعروض التنافسية في الحوسبة والشبكات</li>
<li>قيادة فكرية من خلال مشاركة الرؤى حول أفضل الممارسات والنهج المبتكرة لمعوقات البنية التحتية</li>
<li>تطوير وثائق تقنية شاملة، بما في ذلك مخططات الهندسة المعمارية، مخططات الحلول، ومواصفات التكوين</li>
</ul>
<h4>الكفاءات الأساسية</h4>
<ul>
<li>خبرة 8 سنوات في ما قبل البيع/مهندس حلول يعمل مع حلول وخدمات الأمن المعلوماتي</li>
<li>خريج علوم الحاسوب أو الهندسة</li>
<li>الكفاءة الأساسية في تطوير الأعمال في مجال “حلول الأمن السيبراني للبنية التحتية” (مراكز البيانات، المستخدم النهائي، الشبكة، السحابة والتنقل) وخدمات الأمن المُدارة</li>
<li>مهارات تواصل ومهارات شخصية وعرض قوية</li>
<li>مهارات الإقناع والتفاوض</li>
<li>إتقان ممتاز للغتين العربية والإنجليزية</li>
<li>خبرة سابقة في تكامل الحلول ميزة إضافية</li>
</ul>
<h4>المهارات الفنية/المهنية</h4>
<ul>
<li>خبير في أمن البنية التحتية (مراكز البيانات، الشبكات والحوسبة للمستخدم النهائي)، أمان السحابة، الخدمات الأمنية المدارة وإدارة المخاطر</li>
<li>فهم متقدم للبنية التحتية لتكنولوجيا المعلومات وتطوير السحابة</li>
<li>مهارات تقنية ممتازة لبناء هندسة أمنية متوافقة مع متطلبات العمل</li>
<li>فهم جيد للذكاء الاصطناعي والتعلم الآلي</li>
<li>فهم جيد للترميز وقواعد البيانات وتطوير البرمجيات</li>
</ul>
<h4>نبضنا</h4>
<p>نحن شركة اتصالات دولية رائدة نخدم ملايين العملاء. في فودافون، نؤمن بأن الاتصال قوة خير. إذا استخدمناه للأشياء التي تهم حقاً، يمكنه تحسين حياة الناس والعالم من حولهم. من خلال تقنيتنا نمكّن الناس، نربط الجميع بغض النظر عمن هم أو أين يعيشون ونحمي الكوكب، مع مساعدة عملائنا على فعل الشيء نفسه.</p>
<p>الانتماء في فودافون ليس مفهوماً فحسب؛ إنه مُعاش ومُلتزم ومُنمّى من خلال كل ما نقوم به. ستكون جزءاً من مجتمع عالمي ومتعدد، يضم عقول وقدرات وخلفيات وثقافات مختلفة كثيرة. نحن ملتزمون بزيادة التنوع، وضمان تمثيل متكافئ، وجعل فودافون مكاناً يشعر فيه الجميع بالأمان والقيمة والشمول.</p>
<p>إذا كنت تحتاج أي تعديلات معقولة أو لديك طلب وصول كجزء من رحلتك التوظيفية، مثل تمديد الوقت أو فترات راحة بين التقييمات عبر الإنترنت، يرجى التواصل مع فريق التوظيف للحصول على الإرشاد.</p>
<p>معاً نستطيع.</p>
<p><h4>انضم إلينا</h4>
<p>في فودافون، نحن لا نشكّل مستقبل الاتصال لعملائنا فحسب، بل نُشكّل أيضاً مستقبل كل من ينضم إلى فريقنا. عندما تعمل معنا، أنت جزء من مهمة عالمية لربط الناس، وحل التحديات المعقدة، وخلق عالم أكثر استدامة وشمولاً. إذا كنت ترغب في تطوير مسيرتك المهنية مع العثور على التوازن المثالي بين العمل والحياة، فإن فودافون تمنحك الفرص للمشاركة وإحداث تأثير حقيقي.</p>
<h4>الغرض من الدور</h4>
<p>لتشغيل وإدارة أنظمة الأمن السيبراني ومرافق التحكم في وصول المستخدم (منطقي وفعلي) لضمان أن الوصول مخول وفق سياسة أمان فودافون مصر.</p>
<h4>مسؤوليات العمل</h4>
<p><strong>المسوؤليات الرئيسية وملك القرار</strong></p>
<ul>
<li>الحفاظ على توفر أنظمة الأمن السيبراني وضمان حل القضايا التي تم تصعيدها من الخط الأول ضمن اتفاقية مستوى الخدمة المتفق عليها.</li>
<li>المسؤول عن تنفيذ ملفات وصول جماعية للمستخدمين تم تعريفها واعتمادها من قبل نظام الإنتاج وأصحاب البيانات.</li>
<li>المسؤول عن تنفيذ طلبات التغيير الأمنية المعتمدة والمحددة رئيسياً.</li>
<li>الحفاظ على نقل المعرفة وتوثيق الأنظمة المتاحة.</li>
<li>التعامل مع اتصالات الحوادث داخل الفريق ومع الفرق الأخرى عند الضرورة.</li>
<li>تصعيد القضايا إلى البائعين والتأكد من حل القضايا ضمن SLA العقد.</li>
</ul>
<h4>ليس مناسباً تماماً؟</h4>
<p>قلق من أنك لا تستوفي جميع المعايير المرجوة تماماً؟ في فودافون نحن شغوفون بتمكين الناس وخلق بيئة عمل يمكن للجميع أن يزدهر فيها بغض النظر عن خلفيتهم الشخصية أو المهنية. إذا كنت متحمساً للدور لكن خبرتك لا تتطابق تماماً مع كل جزء من الوصف الوظيفي، فنحن نشجعك على التقديم حتى إن كان قد تكون أنت المرشح المناسب لهذا الدور أو لفرصة أخرى.</p>
<h4>متطلبات الوظيفة</h4>
<p><strong>الكفاءات الأساسية والمعرفة والخبرة</strong></p>
<ul>
<li>مهارات التعامل والتواصل بين الأشخاص.</li>
<li>مهارات إدارة الوقت.</li>
<li>تفكير innovatif؟ (يمكن ترجمتها بشكل أكثر دقة: تفكير مبتكر.)</li>
<li>فريق العمل والتركيز على العملاء.</li>
<li>تفكير منطقي وتحمل المسؤولية.</li>
</ul>
<p><strong>يجب أن تتوافر المؤهلات التقنية/المهنية:</strong></p>
<ul>
<li>درجة البكالوريوس في الهندسة أو علوم الحاسوب.</li>
<li>خبرة 4-5 سنوات في التكنولوجيا، بما في ذلك 3 سنوات كمهندس أمني.</li>
<li>خبرة في صيانة مقاييس الأداء لنظم/خدمات الأمن.</li>
<li>شهادة أمنية عامة أو من بائع مفضلة (CISSP, CIH, CCNP, F5).</li>
</ul>
<h4>من نحن</h4>
<p>نحن مزود تيليكوم دولي رائد، نخدم ملايين العملاء. في فودافون، نؤمن بأن الاتصال قوة للخير. إذا استخدمناها للأشياء التي تهم حقاً، يمكن أن تحسن حياة الناس والعالم من حولهم. من خلال تقنيتنا نمكّن الناس، نربط الجميع بغض النظر عمن هم وأين يعيشون ونحمي الكوكب، بينما نساعد عملاءنا على القيام بالمثل.</p>
<p>الانتماء في فودافون ليس مفهومًا فحسب؛ بل هو حي ومتنفس ومزروع من خلال كل ما نقوم به. ستكون جزءاً من مجتمع عالمي ومتعدد الثقافات، مع عقول كثيرة، قدرات مختلفة، وخلفيات وثقافات متنوعة. نحن ملتزمون بزيادة التنوع، وضمان التمثيل المتساوي، وجعل فودافون مكاناً يشعر الجميع فيه بالأمان والتقدير والشمول.</p>
<p>معاً نستطيع ذلك.</p>
مطلوب (يفترض أن يكون بين 4-6 سنوات) تقييم يومي للثغرات التي حددتها فحص البنية التحتية، إعطاء الأولوية للثغرات المكتشفة مع جداول زمنية للإصلاح، العمل مع فريق الأمن لمراجعة وتطبيق مستندات التعزيز على جميع الأنظمة. الامتثال لمعايير وSLAs لدى عميل MBSS. إجراء تمارين DR للأنظمة المحددة والحفاظ على تحديث دفاتر التشغيل ووثائق التمرين. الت aligning مع فريق BCP/BCM في أنشطة DR وجميع النتائج. يوفر تحليل للثغرات لباقي أعضاء الفريق للمساعدة في جهود الإصلاح الشامل للثغرات. إجراء تحليل لمشاكل وأمان/ثغرات. الحفاظ على معرفة باتجاهات التهديدات والأمن. تطوير مقاييس وقدرات لضمان إدارة الثغرات بشكل فعال. تنفيذ استراتيجية إدارة دورة حياة الثغرات عبر المنظمة. تكوين وجدولة وتنفيذ فحص الثغرات، وتقديم تقارير الفحص. إنشاء علاقات مع مالكي الأنظمة وشركاء عمليات الأعمال بغرض ضمان أن الثغرات المحددة تُرُد في الإطار الزمني المحدد. العمل مع فرق عابرة للوظائف ومستخدمين داخليين لفرض معايير الأمان التقنية من خلال تقديم المساعدة في تطبيق المعايير المعتمدة على المشاريع. يوفر تحليل للثغرات لباقي أعضاء الفريق للمساعدة في جهود الإصلاح الشامل للثغرات. دعم التعرف على الثغرات وتصنيف تأثيرها على البيئة. إبلاغ قيادة VM باختبارات الثغرات والتهديدات المحتملة. دفع مؤشرات الأداء الرئيسية/اتفاقيات مستوى الخدمة للحساب المرتبط بمقاييس الأمان. فرز تقارير الامتثال والثغرات والمتابعة من البداية للنهاية وتحقيق الإغلاق والوصول إلى SLA. المعرفة بتقييم أثر الأعمال والتحديثات الدورية إلى BCM وفريق BCP. معرفة إضافية بـ Archer، أداة فحص Qualys سيكون ميزة. <br>مفضل جيد أن يكون لديك خبرة عملية في أدوات فحص الثغرات مثل Qualys و Archer. معرفة عملية بعدة منصات تكنولوجيا معلومات مثل Windows، Linux/Unix، قواعد البيانات، الشبكة، إلخ.<br>تفاصيل وظيفة دور (لإحالة المرشح) تقارير إلى مدير أمان وثغرات الإدارة؛ حجم الفريق، إن وجد؛ التقارير إلى هذا الدور: هذا دور مستقل فاعل
<section><p class="heading jdMain">الوصف الوظيفي</p><p class="heading">الأدوار والمسؤوليات</p><div class="paragraph"><p>نحن على مسافة قريبة من حيث: حيث يلتقي أبرز مواهب التكنولوجيا بفرص عالمية المستوى! في Xenon7، نعمل مع المؤسسات الرائدة والشركات الناشئة المبتكرة في مشاريع مثيرة وحديثة تستفيد من أحدث التقنيات عبر مجالات تقنية متعددة بما في ذلك البيانات، الويب، البنية التحتية، الذكاء الاصطناعي، والعديد غيرها. حيث تمكِّن خبرتنا في تطوير حلول تكنولوجيا المعلومات والموارد عند الطلب من الشراكة مع العملاء في مبادرات تحويلية تقود الابتكار ونمو الأعمال. سواء كان ذلك تمكين المنظمات العالمية أو التعاون مع الشركات الناشئة الرائدة، نحن ملتزمون بتقديم حلول متقدمة ومؤثرة تلبي أكثر التحديات تعقيداً في اليوم.
</p><p>عن العميل: الانضمام إلى إحدى المؤسسات المالية الرائدة في مصر، المعروفة بمجموعة الخدمات المصرفية الواسعة لديها، بما في ذلك الخدمات المصرفية المؤسسية، والخدمات المصرفية الشخصية، والمصرفية الإسلامية. مع وجود عالمي من خلال أكثر من 50 فرعاً ومراسلاً، نخدم عميلًا متنوعاً وديناميكياً. مع انطلاقنا في رحلة تحول رقمي رائدة، نلتزم باستغلال أحدث التقنيات لإقامة بنية بيانات متطورة ستعيد تعريف أدائنا وتقديم الخدمات.</p><p>المسؤوليات الأساسية:</p><ul><li>قيادة
Pharmaplast is looking for a Senior Quality Inspector to join its Quality team in Borg El Arab, Alexandria.<br><br>Requirements<br><br>Bachelor's degree in Science. Previous experience in the pharmaceutical industry is required. Good knowledge of GMP requirements and quality inspection practices. Strong attention to detail and documentation skills. <br><br>Key Responsibilities<br><br>Perform in-process and final product inspections. Ensure compliance with approved specifications, procedures, and GMP requirements. Record inspection results and report any non-conformities. Support investigations and corrective actions related to quality issues. Collaborate with Production and Quality teams to maintain product quality standards. <br><br>If you have the required experience and are interested in joining a dynamic manufacturing environment, we would be pleased to hear from you.<br><br>To apply, please send your CV to<br><br> hr.bea@pharmaplast-online.com <br><br>and include "Careers" in the body of your email.
Freelance Third-Party Quality Inspector (Assignment-Based)???? Location: Egypt (Nationwide) About CSG-EGCSG-EG is an independent third-party Inspection, Audit & Compliance company providing professional quality assurance services across Egypt. We are expanding our network of freelance inspectors to support inspection projects across multiple industries. We are looking for dedicated professionals who are committed to quality, integrity, and delivering reliable inspection services. Key Responsibilities Conduct Final Random Inspections (FRI) Conduct During Production Inspections (DUPRO) Conduct Pre-Production Inspections (PPI) Conduct Container Loading Supervision (CLS) Verify products against specifications and quality requirements Identify and document quality issues Prepare professional inspection reports with clear findings and photographs Submit reports within required timelines Minimum Requirements Applicants should:Be based anywhere in Egypt Be available to travel when required Own a laptop Own a modern digital camera or a high-quality smartphone camera Have good English reading and writing skills Be proficient in Microsoft Word, Excel, Outlook and Email Be able to prepare professional inspection reports Have strong attention to detail and professional ethics Previous experience with a Third-Party Inspection company is preferred but not mandatory. Candidates with factory quality control experience are also encouraged to apply. Preferred Industry Experience Priority will be given to candidates with experience in:Garments & Apparel Home Textiles Textile Manufacturing Carpets & Rugs Experience in the following industries is also an advantage:Consumer Products Glass Products Marble & Building Materials Electrical Appliances Fresh Produce Frozen Foods Herbs & Agricultural Products What We Offer Assignment-based freelance opportunities Professional training and continuous development Long-term cooperation opportunities Exposure to international inspection standards Professional and supportive working environment How to Apply Please send your CV to:???? careers@csg-eg.comEmail Subject:Freelance Third-Party Quality Inspector – [Your City]In your email, please include:Your current city and governorate Industries you have experience inspecting Whether you are currently working with an Inspection, Audit or Certification company (Please specify the company name) Your current inspection/freelance daily rate (if applicable) Your expected daily rate Your availability (Freelance / Full-Time / Both) Your notice period (if currently employed) Confirmation that you own:A laptop A modern digital camera or high-quality smartphone Only shortlisted candidates will be contacted.
Role Objectives Production Quality Inspector is a professional member of Breadfast family who will be responsible for inspecting and testing products and overseeing operations for the company to ensure they meet production standards.<br> Roles & Responsibilities:Inspect quality standards for the products a company produces Follow up on all operational activities and specifications to ensure that operations meet production standards Inspect and test the materials and equipment produced by a company Reject all products and materials that fail to meet quality expectations. Measure product dimensions, examine functionality, and compare the final product to the specifications. Document inspection outcomes by completing detailed reports and performance records. Teach the production team about quality control concerns to improve product excellence. Monitor the production process and personal hygiene. Collect all important data needed for quality engineers.<br>REQUIRED EDUCATION, KNOWLEDGE, AND SKILLSWork Experience in quality control or similar field is preferred. Strong understanding of quality control standards and testing techniques. Excellent command of the written and spoken Excellent communication and handling skills
Position Summary:The Information Security Lead is responsible for leading, managing, and continuously improving One Health's Information Security Program. The role serves as the primary operational owner of all information security, cybersecurity, risk management, governance, compliance, security operations, security architecture, vulnerability management, and incident response activities. The Information Security Lead will ensure that security controls, policies, standards, and procedures are effectively implemented and maintained across the organization while supporting business objectives and compliance requirements. The role will coordinate with business units, IT teams, third-party providers, auditors, regulators, and AXA Group stakeholders to maintain an effective and mature security posture.<br>Key Responsibilities Information Security Governance & Management• Lead and manage the Information Security Program across the organization.• Develop, implement, maintain, and continuously improve the Information Security Strategy, Roadmap, Policies, Standards, Procedures, and Guidelines.• Define and execute annual information security objectives aligned with business goals and AXA Group requirements.• Establish and monitor Information Security KPIs, KRIs, compliance metrics, and security maturity indicators.• Prepare and present security reports, dashboards, and risk updates to senior management, executive leadership, and relevant governance committees.• Manage information security documentation and ensure continuous review and improvement of security processes.<br>Risk Management & Compliance• Own and manage the Information Security Risk Management Program in alignment with AXA’s IRM framework.• Conduct and oversee enterprise security risk assessments and maintain the Information Security Risk Register.• Identify security threats, vulnerabilities, and business impacts and ensure effective remediation plans are implemented.• Manage compliance with local regulations, legal requirements, AXA Group standards, ISO 27001 requirements, and other applicable security frameworks.• Coordinate internal and external audits and ensure timely closure of audit findings and security observations.• Manage security exceptions, risk acceptance processes, and compliance tracking activities.<br>Information Security Management System (ISMS)• Own, maintain, and continuously improve the Information Security Management System (ISMS).• Ensure all security controls remain effective and aligned with organizational risks and compliance requirements.• Coordinate management reviews, internal assessments, corrective actions, and continuous improvement initiatives.<br>Security Operations & Incident Response• Manage and oversee all security operations activities, including security monitoring, vulnerability management, threat management, and incident response.• Manage internal and external Security Operations Center (SOC) services and ensure effective detection, investigation, escalation, and response to security events.• Lead cybersecurity incident investigations and coordinate remediation activities with IT, business stakeholders, vendors, legal, and HR functions.• Ensure security incidents are properly documented, investigated, reported, and resolved.<br>Vulnerability Management & Security Testing• Own and manage vulnerability assessment and penetration testing programs.• Ensure regular vulnerability scans, penetration tests, security assessments, and remediation activities are conducted.• Track and report remediation status and ensure closure of identified security weaknesses.<br>Security Architecture & Secure Design• Review and approve security requirements, architectures, and designs for new systems, applications, cloud environments, and technology initiatives.• Ensure cybersecurity requirements are incorporated into projects, procurement processes, RFIs, RFQs, and RFPs.• Participate in project governance processes and provide security approvals before production deployment.• Promote secure-by-design and security-by-default principles across all technology initiatives. Application Security & Change Management• Ensure security requirements are embedded within Software Development Lifecycle (SDLC), Change Management, and Project Management processes.• Conduct security reviews and risk assessments for new applications, infrastructure, and business initiatives.• Ensure appropriate security testing is completed before Go-Live approval. Third-Party & Vendor Security Management• Conduct security reviews and risk assessments for vendors, suppliers, partners, and third parties.• Define and monitor security requirements for third-party relationships.• Manage security assessments and remediation activities related to external service providers. Security Awareness & Training• Develop and manage the Information Security Awareness Program.• Deliver security awareness initiatives and promote a strong security culture throughout the organization.• Conduct targeted awareness activities for technical and non-technical employees. Resource, Budget & Vendor Management• Manage security vendors, consultants, and external security service providers.• Support development and management of the Information Security budget and resource plans.• Identify resource requirements and recommend improvements to strengthen the organization's security capabilities.<br>Qualifications Education• Bachelor's Degree in Information Security, Computer Science, Information Technology, Engineering, or a related discipline. Professional Experience• Minimum 8–10 years of progressive experience in Information Security, Cybersecurity, Risk Management, Security Operations, Security Architecture, or related disciplines.• Minimum 3–5 years in a management role responsible for information security programs.• Proven experience managing Information Security Management Systems (ISMS), security governance, risk management, compliance programs, incident response, vulnerability management, and security operations.• Experience managing third-party security providers, auditors, consultants, and security vendors.• Experience within healthcare, insurance, financial services, or highly regulated environments is preferred. Technical Knowledge• Strong understanding of ISO 27001, NIST Cybersecurity Framework, CIS Controls, and information security best practices.• Strong knowledge of cloud security, network security, application security, vulnerability management, and security monitoring.• Experience with security risk assessment methodologies and cybersecurity governance frameworks.• Knowledge of regulatory and compliance requirements applicable to healthcare and insurance sectors. Preferred Certifications• CISSP• CISM• CRISC• ISO 27001 Lead Implementer and/or Lead Auditor• CCSP• Security+, CEH, or equivalent cybersecurity certifications<br>Leadership Competencies Motivates People – Gains commitment to achieve business objectives through effective communication, coaching, and leadership. Models our Values – Promotes accountability, integrity, ownership, and adherence to company values and standards. Strategic Thinking – Aligns security initiatives with business objectives and organizational priorities. Stakeholder Management – Builds strong relationships with business leaders, technology teams, auditors, regulators, and external partners. Decision Making – Makes sound risk-based decisions while balancing business and security requirements.
IT Security Manager Experience in healthcare industry. The IT Security Manager is responsible for the day‑to‑day operation and execution of the healthcare organization’s security function, covering cyber, physical, and operational security domains. The role ensures that security technologies are effectively operated, security scenarios are actively monitored and managed, and security incidents are detected, analyzed, and resolved in collaboration with IT and clinical teams. The Security Manager leads the security team’s daily activities and acts as the operational arm of the security pillar under the direction of the Security Director.. Security Operations Execution Execute the organization’s security strategy and policies as defined by the Security Director. Manage daily security operations across IT systems, clinical platforms, infrastructure, and facilities. Ensure continuous monitoring of security events, alerts, and risks. Maintain operational readiness for security incidents affecting patient care, data, or facilities. 2. Security Technologies & Equipment Management Manage, operate, and oversee security technologies and equipment, including:Cybersecurity Technologies Firewalls and network security appliances IDS / IPS systems Endpoint protection and EDR solutions SIEM and log monitoring platforms Email and web security solutions Identity and Access Management (IAM), including AD-based access controls Vulnerability assessment and patch management tools Physical & Facility Security Systems CCTV and video surveillance platforms Access control systems (card based, biometric, secure zones) Security systems protecting data centers and critical technical areas 3. Security Scenarios & Incident Response Define, document, and operationalize security scenarios, including:Cyberattacks and malware outbreaks Ransomware and phishing incidents Unauthorized access to HIS, PACS, ERP, or clinical systems Data leakage or privacy breaches Physical security incidents impacting IT or clinical assets Lead incident detection, containment, investigation, and recovery activities. Coordinate with the Security Director during high severity or organization wide incidents. 4. Team Leadership & Daily Management Lead and manage the security team’s day to day activities, including monitoring, analysis, and response. Assign tasks, shifts, and on call coverage to ensure continuous security operations. Review alerts, incidents, and investigations for quality and completeness. Coach and develop team members on security tools, procedures, and threat response techniques. 5. Collaboration with IT & Operations Work closely with:Applications teams to secure HIS, PACS, Oracle Fusion, and custom solutions Infrastructure teams to secure networks, servers, cloud platforms, and data centers Hospital and clinical operations to ensure security controls do not disrupt patient care Provide security input into system changes, implementations, and upgrades. 6. Risk, Compliance & Reporting Identify and report security risks, vulnerabilities, and incident trends to the Security Director. Support audits, assessments, and regulatory reviews by preparing security evidence and reports. Ensure security controls are operating effectively and consistently across the organization. Technical Strong hands‑on experience with cybersecurity and physical security systems. Understanding of healthcare IT environments, clinical systems, and sensitive data protection. Experience operating monitoring, alerting, and incident response processes. Leadership & Behavioral Proven ability to lead operational teams in a 24/7 or high‑availability environment. Strong incident management and decision‑making skills under pressure. Clear and disciplined communication with security leadership and IT peers.<br><br><br>education requirements<br>Bachelor’s degree in Information Security, Computer Science, or related field.7–10+ years of experience in IT or security operations, preferably in healthcare or regulated environments. Demonstrated experience managing security tools, incidents, and operational teams.
Summary of Duties:Responsible for managing and implementing the cybersecurity assurance programme. including vulnerability management, application security testing, penetration testing, and security compliance monitoring to protect enterprise systems and applications from security threats. Manage vulnerability management programme using Scanners for comprehensive vulnerability scanning, assessment, remediation tracking, and reporting ensuring effective vulnerability management across the enterprise. Manage and oversee FIM, DAM and firewall assurance operations, coordinating teams, tracking remediation, and ensuring timely closure of identified security gaps. Lead application security testing (SAST) , dynamic application security testing (DAST), software composition analysis (SCA), and secure coding practices ensuring secure application development. Oversee ATM security programme for ATMs including vulnerability assessment, penetration testing, security hardening, and compliance monitoring ensuring ATM security resilience. Coordinate security compliance monitoring including baseline compliance scanning for security baselines, configuration compliance, and regulatory compliance with automated scanning and compliance reporting. Lead IT Security assessment practice for multiple technologies including WAF, NGFW, IPS, ISE, Device Control, MFA, Web Proxy, Mail Proxy, EDR, Application Control, Sandbox, Routers, Switches, SD-WAN .. etc to Validate control effectiveness through configuration reviews, threat-based testing, rule analysis, logging verification, and use-case validation as per standards and industry best practice. Integrate security into Dev Sec Ops pipeline including automated security testing (SAST, DAST, SCA), security gates, and pipeline automation ensuring secure CI/CD. Develop security assurance reports and metrics, prepare evidence for audits, and ensure audit readiness.<br>Minimum Qualifications BSC in Communication Engineering or computer science CISSP (Certified Information Systems Security Professional) certificate is preferred. CEH (Certified Ethical Hacking) or OSCP preferred GIAC certifications (GWAPT, GPEN) preferred Master's degree in Information Security or related field preferred<br>Minimum Experience:8+ Years of IT & Information Security experience with demonstrated leadership in vulnerability management, application security, and security assurance programmes<br>Job Specific Skills Vulnerability Management experience with enterprise tools (Tenable, Nessus, Qualys) Application Security Testing (SAST, DAST, SCA) experience with Fortify and similar tools Penetration testing methodologies and frameworks (OWASP, PTES) Security compliance monitoring and baseline management Dev Sec Ops integration and CI/CD security Network security (Firewalls, IPS, WAF) management Security reporting and metrics development Audit evidence preparation and regulatory compliance (CBE, PCI, ISO 27001) Banking environment experience Risk Management Strategic planning and programme management Team leadership and mentoring Stakeholder management at executive level
Role Description This is a full-time, hybrid Chief Information Security Officer (CISO) role based in Cairo, Egypt, with flexibility for partial work from home. The CISO will define and lead CYBER سايبر’s information security strategy, policies, and frameworks, ensuring alignment with business objectives and regulatory requirements. Daily responsibilities include overseeing security operations, monitoring threats, managing incident response, and coordinating vulnerability assessments and penetration testing. The role involves partnering with executive leadership and department heads to assess risk, prioritize security initiatives, and support secure digital transformation. The CISO will guide security architecture for applications and infrastructure, manage security awareness programs, and lead the development and testing of business continuity and disaster recovery plans. The position includes managing security vendors and tools, preparing regular risk and compliance reports, and leading, mentoring, and growing the security team.<br>Qualifications<br> Strong expertise in Information Security Management and Information Security, with a track record of building and maintaining enterprise-wide security programs. Deep knowledge of Cybersecurity practices, including threat detection, incident response, security monitoring, and risk assessment. Hands-on experience with Application Security, including secure SDLC, code review practices, and collaboration with development teams to embed security by design. Proven experience in Business Continuity planning, disaster recovery, and resilience strategies to ensure minimal disruption to critical operations. Familiarity with relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS Controls) and regulatory or industry compliance requirements. Demonstrated leadership experience managing cross-functional security initiatives and guiding technical and non-technical stakeholders. Excellent communication, presentation, and stakeholder management skills, with the ability to translate complex security topics into clear business language. Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; advanced degree or recognized security certifications (e.g., CISSP, CISM, CISA, CCSP) are preferred. Experience in hybrid or cloud environments (e.g., AWS, Azure, GCP) and modern security technologies such as SIEM, EDR, IAM, and DLP is highly beneficial. Proven ability to operate in a fast-paced environment, make informed risk-based decisions, and uphold high ethical and professional standards.
Information Security & Risk Manager<br><br> Job Details<br><br>Position Title: Information Security & Risk Manager<br><br>Department: Technology Services / IT<br><br>Reports To: Information Security / CTO<br><br>Employment Type: Permanent<br><br>Location: Maadi, Degla - On-site<br><br>Grade: As per organizational structure<br><br>Direct Reports: As per approved organizational structure<br><br> Job Purpose<br><br>The Information Security & Risk Manager is responsible for leading the organization's Information Security and Cyber Risk function. The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.<br><br>The role provides strategic and operational leadership across Information Security Governance, Risk & Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness.<br><br> Key Accountabilities & Deliverables<br><br>The role will be accountable for the development, implementation, and continuous improvement of:<br><br>Information Security Strategy and Cybersecurity Roadmap Information Security policies, standards, procedures, and guidelines Information Security Management System (ISMS) Enterprise IT and Cybersecurity Risk Register Information Security Risk Assessment Reports Risk Treatment and Remediation Plans Security Compliance Reports, including ISO 27001 and applicable regulatory requirements Cybersecurity Control Framework and Control Effectiveness Reports Vulnerability Assessment and Penetration Testing (VAPT) Reports Cybersecurity Incident Reports and Root Cause Analysis (RCA) Security Monitoring and Threat Dashboards Cybersecurity KPI and KRI Dashboards Identity and Access Management (IAM) Policies, Models, and Access Matrices Data Classification and Data Protection Framework Internal and External Audit Reports and Evidence Repository Audit Findings and Remediation Tracking Business Continuity and Disaster Recovery (BCP/DR) Security Alignment Security Awareness and Training Programs and Reports Regulatory Assessments, submissions, and compliance evidence<br><br>B. Information Security Risk Management C. Security Operations & SOCD. Cybersecurity Incident Response E. Governance, Risk & Compliance F. Data Protection & Privacy G. Vulnerability & Security Testing H. Identity & Access Management I. Security Awareness & Culture J. Business Continuity & Disaster Recovery<br><br> Key Responsibilities Information Security Strategy & Governance Define, develop, and execute the organization's Information Security Strategy and cybersecurity roadmap Own and continuously improve the Information Security Management System (ISMS) Develop and maintain information security policies, standards, procedures, and guidelines Establish effective cybersecurity governance frameworks aligned with business objectives Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership Establish and monitor security KPIs, KRIs, and performance metrics Ensure information security requirements are incorporated into technology initiatives, projects, and business processes Lead regular information security and cybersecurity risk assessments across the organization Own and maintain the enterprise IT and cybersecurity risk register Identify, assess, prioritize, and communicate information security risks Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies Translate technical cybersecurity risks into business impact and communicate them effectively to senior management Monitor the organization's overall cyber risk profile and provide recommendations for risk reduction Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers Ensure effective security monitoring, threat detection, investigation, and response capabilities Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies Establish and monitor security incident management processes Review security alerts, incidents, trends, and threat intelligence Ensure appropriate escalation and response mechanisms are in place for critical security events Monitor and improve the effectiveness of security controls and operational processes Lead the organization's cybersecurity incident response capability Ensure effective detection, containment, eradication, recovery, and post-incident activities Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP) Conduct regular incident response exercises and simulations Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed Track corrective and preventive actions resulting from security incidents Ensure lessons learned are incorporated into security controls and processes Lead Information Security Governance, Risk, and Compliance (GRC) activities Ensure compliance with applicable regulatory and industry requirements, including:National Cybersecurity Authority (NCA) requirements Saudi Personal Data Protection Law (PDPL) National Data Management Office (NDMO) requirements, where applicable ISO/IEC 27001Other applicable cybersecurity and data protection regulations Coordinate internal and external security audits and assessments Manage audit evidence collection and maintain an organized security evidence repository Track audit findings, remediation plans, and closure status Prepare management and regulatory compliance reports Support regulatory assessments, reviews, and submissions as required Establish and maintain data protection and information classification frameworks Ensure appropriate security controls are implemented for sensitive and personal data Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements Establish appropriate data access, handling, retention, and protection controls Support privacy and data protection risk assessments where required Oversee vulnerability management activities across IT environments Coordinate Vulnerability Assessments and Penetration Testing (VAPT) Review vulnerability and penetration testing reports Ensure security vulnerabilities are appropriately prioritized based on business risk Track remediation activities and validate closure of critical and high-risk vulnerabilities Ensure security testing is incorporated into relevant technology projects and systems Establish and maintain IAM policies, standards, and access control frameworks Ensure appropriate access governance and segregation of duties Review privileged access and high-risk accounts Support periodic user access reviews and access recertification Ensure access controls align with business requirements and security policies Develop and implement an organization-wide security awareness program Lead cybersecurity awareness campaigns and security training Implement phishing simulation and social engineering awareness programs Monitor employee security awareness performance and identify improvement areas Promote a strong cybersecurity culture across all business functions Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans Participate in BCP/DR risk assessments and exercises Ensure critical systems have appropriate security, recovery, and resilience controls Support testing and continuous improvement of security-related recovery procedures Qualifications & Experience<br><br>Minimum Qualifications<br><br>Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Security, or a related discipline CISSP or CISM certification - Mandatory ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred NCA-related cybersecurity accreditation or certification is preferred<br><br>Minimum Experience<br><br>8-10 years of professional experience in Information Security / Cybersecurity At least 3 years of experience in a cybersecurity or information security management/leadership role Proven experience managing enterprise cybersecurity programs and security teams Proven experience in GRC, risk management, security operations, and incident response Proven experience working with regulatory compliance, audits, and cybersecurity frameworks Technical & Professional Skills<br><br>The successful candidate should demonstrate:<br><br>Strong knowledge of cybersecurity frameworks, standards, and best practices Deep understanding of NCA, PDPL, NDMO, ISO 27001, and applicable data protection requirements Strong expertise in Governance, Risk, and Compliance (GRC) Experience with SOC operations and SIEM platforms such as Microsoft Sentinel, Splunk, or equivalent Strong understanding of vulnerability management and penetration testing Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP) Strong understanding of IAM and access governance Knowledge of data protection, data classification, and data governance Strong understanding of secure architecture and security controls Ability to develop and monitor cybersecurity KPIs and KRIsStrong audit and regulatory assessment experience Ability to assess and communicate cybersecurity risks in terms of business impact Strong strategic thinking and high-level decision-making capability Excellent leadership and people-management skills Ability to manage cross-functional teams and stakeholders under pressure Strong communication, presentation, and reporting skills Bilingual proficiency in Arabic and English Leadership Competencies Strategic Thinking Cybersecurity Leadership Risk-Based Decision Making Stakeholder Management Executive Communication Team Leadership & Development Problem Solving Crisis and Incident Management Governance & Accountability Continuous Improvement Business Acumen Change Management<br><br>Special Requirements<br><br>Ability to work effectively in a fast-paced and dynamic environment Ability to manage cybersecurity incidents and critical security situations Willingness to participate in security incident response and escalation activities when required Strong confidentiality and professional integrity Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders
Security Test Engineer<br>About the Role We are looking for a Security Test Engineer to validate the security, reliability, and correctness of authorization and policy enforcement systems used in AI agent platforms. This role combines security testing, automated test development, API security validation, and policy verification to ensure secure, compliant, and resilient platform services. As part of the Core Architecture Team, you will work closely with software engineers, architects, and security specialists to design and execute security-focused test strategies, build automated test suites with Python, and validate authorization mechanisms that protect enterprise-scale cloud platforms. This is an exciting opportunity to contribute to next-generation AI platforms while advancing modern application security and quality engineering practices.<br>Project Overview Our customer is a multinational corporation with more than a century of history and operations in over 180 countries. As part of its digital transformation journey, the company is investing heavily in Reduced-Risk Products (RRPs), targeting more than one billion consumers worldwide. The enterprise platform supports more than 700 applications across Digital Commerce, Digital Marketing, IoT, and Enterprise Services. Intellias partners with the customer to engineer a comprehensive software ecosystem for innovative IoT products and digital platforms. As a member of the Core Architecture Team, you will help build and secure an enterprise engineering platform that accelerates software delivery by providing reusable services, security controls, governance, and engineering best practices across multiple development teams.<br>Key Responsibilities Design and execute functional and security testing strategies for policy-driven authorization systems. Develop and maintain automated security and policy validation test suites using Python and pytest. Validate permit/deny decisions, policy precedence, parameter-level access controls, and authorization logic. Verify policy behavior during transitions between LOG_ONLY and ENFORCE modes. Perform API security testing aligned with the OWASP API Top 10. Conduct penetration testing, threat modeling, and security assessments for platform services and AI agent workflows. Design and execute test scenarios covering prompt injection, agent identity spoofing, policy bypass attempts, and other Agentic AI attack vectors. Validate audit logging, traceability, and security event generation for authorization decisions. Verify Agent-to-Agent (A2A) policy enforcement across distributed workflows. Collaborate with software engineering and security teams to identify vulnerabilities and strengthen the platform's security posture. Maintain security test documentation, test reports, and compliance evidence.<br>Required Qualifications Education Bachelor's degree in computer science, Software Engineering, Information Security, or a related technical field. Technical Skills Security testing, including penetration testing and threat modeling. Python test automation using pytest. Functional and security test design. API security testing based on the OWASP API Top 10. Agentic AI threat modeling, including:Prompt injection Policy bypass Agent identity spoofing Authorization and policy enforcement testing. Agent-to-Agent (A2A) policy enforcement validation. Audit log validation and security event verification. Policy validation, including:Permit/Deny correctness Policy precedence Parameter-level conditions LOG_ONLY to ENFORCE mode validation Experience4+ years of experience in Quality Assurance, Security Testing, or Application Security. Experience implementing automated security test suites. Hands-on experience with API security testing and vulnerability validation. Experience designing functional and security test strategies. Strong understanding of secure software development practices.<br>Nice to Have AWS security testing experience. Experience with Cedar policy testing tools. Regulatory compliance testing (GDPR, SOC 2). Experience testing cloud-native applications and distributed systems. Familiarity with AI security, authorization frameworks, and policy engines.<br>Why Join Us? Work on enterprise-scale platforms supporting more than 700 applications used across a global organization. Help secure next-generation AI agent platforms and modern authorization systems. Collaborate with experienced architects, software engineers, and security specialists on innovative cloud-native solutions. Contribute to the development of security standards and best practices that impact engineering teams worldwide. Expand your expertise in AI security, policy validation, cloud-native application security, and automated testing while working on cutting-edge technologies.
We're Hiring | Security Manager (Malls)???? Location: New Cairo, Egypt We are looking for an experienced Security Manager to join our team and oversee security operations for a leading shopping mall. Key Responsibilities:Manage all daily security operations within the mall. Lead, train, and supervise security supervisors and officers. Develop and implement security policies, procedures, and emergency response plans. Coordinate with mall management, tenants, and external authorities. Conduct risk assessments and incident investigations. Ensure compliance with health, safety, and security regulations. Prepare security reports and performance analyses. Requirements:Bachelor's degree is preferred.5+ years of experience in security management. Previous experience in shopping malls, commercial properties, or mixed-use developments is a must. Strong leadership, communication, and problem-solving skills. Excellent knowledge of security operations and emergency procedures. Good command of English is an advantage.???? Interested candidates are invited to apply through Linked In Easy Apply or send their CV to:mohamed.abdallah@alrabat.netPlease mention "Security Manager" in the email subject.
The Security Director is responsible for developing, leading, and governing the organization's security strategy across all operational assets, projects, facilities, and communities. The role ensures the protection of people, properties, business operations, and corporate assets through the implementation of effective security frameworks, risk management practices, emergency preparedness programs, and security technologies. The Security Director provides strategic leadership for security operations, contractor management, crisis response, and business continuity initiatives while ensuring compliance with regulatory requirements and industry best practices. Key Responsibilities:Develop and implement the organization's security strategy, policies, standards, and governance framework across all operational and development assets. Provide strategic leadership and oversight of all security operations, ensuring the effective protection of people, facilities, communities, and company assets. Establish security risk management frameworks and oversee periodic risk assessments, threat analyses, and vulnerability evaluations across the portfolio. Lead the development and implementation of crisis management, business continuity, and emergency response strategies. Oversee the performance and governance of outsourced security service providers, ensuring contractual compliance, service excellence, and cost-effectiveness. Direct the implementation and optimization of physical security systems, including CCTV, access control, perimeter protection, command centers, and other security technologies. Collaborate with Facility Management, Property Management, HSE, Legal, and Operations teams to ensure integrated security and operational resilience. Develop security standards and operational procedures for new developments, asset handovers, and project mobilization activities. Ensure compliance with applicable laws, regulations, security standards, and corporate governance requirements. Lead investigations related to major security incidents, fraud, asset protection concerns, and business disruptions. Prepare and present security performance reports, risk assessments, strategic initiatives, and improvement plans to executive management. Lead, mentor, and develop the security management team, promoting a culture of professionalism, accountability, and continuous improvement. Develop, manage, and control the annual security budget, ensuring the cost-effective allocation of resources, alignment with operational requirements, and adherence to approved financial plans. Perform any other duties or responsibilities assigned by the direct manager. Education: Police Academy graduate or former Police/Military officer is highly preferred, particularly within large-scale real estate, mixed-use, hospitality, or facility management environments. Professional certifications such as CPP (Certified Protection Professional), PSP (Physical Security Professional), ISO 18788, ISO 22301, or equivalent are a Plus. - Previous Experience: Minimum 5 years in a leadership role managing security operations across large-scale real estate portfolios, mixed-use developments, communities, or multi-site operations
Valleysoft | Center of Excellence, based in Riyadh, is a premier IT services provider partnering with global technology leaders like SAP to deliver innovative solutions worldwide. We are currently seeking a dedicated SAP Security Specialist (Band 6B) to join our dynamic team.<br><br>As a SAP Security Specialist, you will be responsible for assisting in implementing and maintaining SAP security frameworks that safeguard our clients' systems and data. You will work closely with senior consultants to ensure proper user access management, role design, and compliance with security policies.<br><br>Responsibilities<br><br>Assist in configuring and maintaining SAP security roles and authorizations Support user administration activities including provisioning and deprovisioning Help monitor SAP systems for security compliance and support remediation efforts Collaborate with SAP teams to implement security policies and procedures Participate in security audits and support documentation efforts Coordinate with other IT teams to address security incidents and vulnerabilities Stay updated on SAP security best practices and tools<br><br>Requirements<br><br>Bachelor's degree in Computer Science, Information Technology, or related field3-5 years of experience in SAP security or related roles Knowledge of SAP security concepts including user management, role design, and authorization objects Familiarity with SAP GRC and other security tools is a plus Good analytical and problem-solving skills Strong communication and teamwork abilities Ability to follow established security protocols and standards Saudi Arabian nationality is required<br><br>Benefits<br><br>Private Health Insurance Training & Development
We are hiring "Senior Network Security Engineer" Location Cairo (On-site | Full-time). Responsibilities We are looking for a Senior Network Security Engineer responsible for maintaining and improving the organization’s network security infrastructure. The role focuses on implementing secure network designs, managing security platforms and ensuring reliable and secure connectivity across internal systems, external partners, and remote access solutions. The candidate will work closely with infrastructure, cloud, and SOC teams to ensure that network security controls are properly implemented and aligned with the organization’s security standards. Job Description· Design, implement, and maintain network security solutions including firewalls, VPN gateways, Email gateway and network segmentation.· Manage and maintain firewall policies, NAT rules, and access control policies in line with security standards and operational requirements.· Implement and maintain secure connectivity including site-to-site VPNs and remote access VPNs for internal users and external partners.· Work with infrastructure and application teams to ensure new systems are deployed following the organization’s network security standards.· Perform security hardening for network devices including firewalls, routers, and switches.· Review and optimize firewall policies periodically to ensure proper access control and minimize security risks.· Support the SOC team during security investigations by providing network-level analysis, traffic verification, and infrastructure insights when needed.· Troubleshoot complex network and security-related issues affecting connectivity or service availability.· Participate in security projects such as network segmentation, data center security improvements, or cloud connectivity implementations.· Maintain proper documentation for network security architecture, firewall policies, VPN configurations, and operational procedures.· Ensure network security infrastructure is operating reliably and that upgrades, patches, and firmware updates are applied as required.· Manage and maintain email security gateway solutions to protect against spam, phishing, and malware threats.· Support the deployment and management of endpoint protection and EDR solutions in coordination with the SOC team. Requirements· Strong understanding of enterprise networking concepts including TCP/IP, routing, VLANs, NAT, and network segmentation.· Hands-on experience with Next Generation Firewalls (such as Fortinet, Palo Alto, Cisco, or similar technologies).· Experience implementing and troubleshooting IPSec VPN , SSL VPN and email gateway solutions.· Familiarity with IDS/IPS, WAF, and network security best practices. Experience analyzing network traffic and troubleshooting connectivity issues across multiple network layers.· Basic knowledge of cloud networking security (AWS, Azure, or similar environments) is a plus.· Proven 5+ years of hands-on experience in network security or network engineering roles. Experience working in enterprise environments with complex network infrastructures. Bachelor’s degree in Computer Science, Information Technology, or related field is preferred. Relevant certifications such as CCNP Security, Fortinet NSE, PCNSE, or similar are considered an advantage.
Lead the design and development of cloud security strategies for cloud service providers (e.g., AWS, Microsoft Azure, Oracle, Google Cloud Platform). Define the architecture, security frameworks, and guidelines for cloud security, covering areas like data encryption, identity and access management, and threat prevention. Work with stakeholders to ensure cloud security aligns with business requirements and regulatory compliance (e.g. GDPR, HIPAA, SOC 2, PCI DSS, etc.). Conduct regular risk assessments and threat modelling for cloud environments to identify vulnerabilities and areas of concern. Develop strategies to mitigate potential cloud-specific risks, such as data breaches, misconfigurations, and unauthorized access. Implement threat detection and response mechanisms to monitor cloud environments for suspicious activity and security incidents. Define and enforce security policies and best practices for cloud services, ensuring they are following both internal and external security requirements. Develop and implement a robust identity and access management (IAM) strategy for cloud resources, utilizing tools such as AWS IAM, Azure Active Directory, and Google Cloud IAM. Establish and maintain security standards for cloud architecture, configuration management, and service integrations. Design and implement security controls for cloud environments to ensure the confidentiality, integrity, and availability of data and applications. Implement security mechanisms such as encryption (in transit and at rest), firewalls, CASB, vulnerability scanning, and network segmentation to secure cloud platforms. Lead the effort to ensure cloud services and architectures comply with relevant regulatory frameworks, standards, and internal security policies. Collaborate with GRC team to assess the impact of regulatory requirements on cloud platforms and ensure proper implementation of controls. Oversee continuous monitoring and auditing of cloud infrastructure to ensure compliance and detect potential risks or gaps in security posture. Work closely with different teams, and other IT departments to integrate security into the entire cloud infrastructure lifecycle, from design to deployment. Provide thought leadership and mentorship on cloud security best practices to internal teams and stakeholders. Educate teams on secure cloud design and operational risk management. Lead the cloud security incident response process, identifying, investigating, and mitigating cloud-based security breaches or attacks. Collaborate with other security and IT teams to develop and implement incident response and disaster recovery plans specifically for cloud environments. Conduct post-incident reviews and root cause analysis to improve cloud security measures and response processes. Evaluate and implement cloud-native security tools, such as CASB, cloud security posture management (CSPM), cloud workload protection platforms (CWPP), and cloud identity and access management tools. Integrate automated security monitoring, reporting, and incident detection tools to reduce manual overhead and improve cloud security monitoring.