وظائف مفتش أمن في مصر

Scope of the job<br><br>Job Purpose<br><br>Global Digital & Technology (D&T) has a worldwide responsibility for all IT processes, solutions and services. The aim is to further enhance HEINEKEN Global Functions by delivering common business driven solutions and services.<br><br>The Global Information Security department is part of Global D&T and has the overall responsibility of assuring that HEINEKEN’s IT Risks are properly managed and information assets & technology is properly secured.<br><br>The Global Information Security teams include Cyber Defence Operations (CDO), Security Competence Centre (SCC) and Security Chapters (ERP, Enterprise Architecture, Data Privacy, etc) to design, implement, monitor, respond and assist with recovery activities against cyberattacks. They deliver deep security and risk management expertise to enable Product Teams and Global Functions to form a proper 1st Line of Defense (LoD) by building the right capabilities into their products (security by design) and support them.<br><br>The Global Information Security Director is heading the department and responsible for the Global Information Security Strategy and orchestrating all security activities within this department and relevant stakeholders. He is part of the Global D&T Executive Leadership Team.<br><br>The Cyber Security Officer (CSO) is responsible for the management and implementation of the global Cyber Security Strategy based on the NIST Cyber Security Framework, to reduce the risk of a Cybersecurity incident according to the risk appetite of HEINEKEN and the Global Function, as well as to raise wider Global Function Cybersecurity awareness.<br><br>Key Responsibilities<br><br>Security Operations Implement global security strategies to maintain the continuity of systems and update these based on local threats. Responsible to manage updates related to Global Function Security Standards that are required due to local legislative requirements, in consultation with the Global Information Security Specialist in line with HEINEKEN Security Strategy and supporting the HEINEKEN Business Strategy. Responsible for Global Function security approvals regarding global services (e.g. Hei Net), in order to maintain the highest level of security for the information and IT assets of the company. Assist the Global Information Security department in the design of controls/ standards and procedures that have broad implications, requiring systems integration of one or more technical platforms. Perform Risk reviews using the risk management procedure for all new Global Function programs/services to be deployed in the Global Function operational environment and veto programs which do not comply with HEINEKEN’s security standards. Monitor internal and external information security and cyber security policy compliance, review and assess information security audits. <br><br>Performs, as per the prescribed frequency the Information Security Maturity Assessment (ISMA), and ensures that all related evidence is available in support of the assessment. Monitor and ensure the timely closure of tasks related to audit and internal control issues raised by e.g. Global Audit, External Audit, etc. Develops and manages the Information Security action plan to address identified risks and non-compliances. <br><br>Gains approval from the relevant management team on that action plan and its related budget. Monitors and reports on the execution of that actions plan, reporting to the Global D&T Function management team and centrally to the Global Information Security Team. Analyse and challenge derogation requests regarding the ISP/TSP that Global Functions could have with a new solution or program, and communicate to the Global Information Security Team and Design Authority for approval in order to protect the HEINEKEN security environment. Drive resolution of cyber security incident responses and address security vulnerabilities. <br><br>Perform/guide/drive digital investigations upon the request of Global Function/HR or Legal teams in case of breaches of HEINEKEN’s Code of Business Conduct. If the Global Function faces any critical IT security incidents or breakout, he/she is responsible as the Global Function security incident lead to resolve in consultation with the Cyber Defense Operations Team (CDO), Global Function D&T Directors and Global Function Line Managers. <br><br>Identify and perform independent analysis to resolve complex first-time issues including the analysis of technical and economic feasibility of proposed security systems/ solutions. He/she is also responsible to assist the Global Information Security department for any IT technical audit (e.g. Ethical Hack) to any Global Function IT infrastructure or service that a 3rd Party offers to HEINEKEN with a valid and open contract to ensure that security policies are in place. Advises Global Function teams for security requirements (e.g. Patching, Anti-Virus, Vulnerability Management, etc). Security Awareness Drive training campaigns on cyber security awareness according to the global security awareness program and based on the Global Function reality. Security Strategy Responsible for identifying potential risks and recommendations on how to prevent and/or avoid that risk within the Global Function. Collaborate with the Global Information Security Specialist to understand and develop further the controls and processes required to improve information security. Innovation Accelerates and Drives implementation of new Security strategies and standards from global D&T towards the HEINEKEN Global Functions Provide security expertise across multiple technical platforms to various Global Function stakeholders in all phases of solutions development (Ideation, Design, build, test and deploy) and Operations.<br><br>Budget Responsibilities<br><br>Assigned to Global Function D&T Manager.<br><br>Number Of Direct Reports<br><br>None<br><br> Position profile<br><br>Qualifications<br><br>Bachelor or Master degree in business information technology or a related field<br><br>Possesses relevant certifications, e.g. CISSP / CCSP / CISM / CISA / CRISC<br><br>Experience / Skills Required<br><br>5+ years of working in the cyber security field and previous experience working as a cyber-security officer or manager. French is a must and preferable. Has worked with relevant market standards such as NIST, ISO 27001, COBIT and relevant laws and regulations such as privacy laws. Experience in handling security incidents. Proven ability to dynamically assess risks, threats & threat actors. Able to work in a cross functional environment; preferably a background in the FMCG industry. Sense of Business Urgency and safe-cautious mind to close critical gaps and reduce any security breach. Ability to explain complex technical processes to business stakeholders. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change. Ability to work and team with a multitude of different people and different cultures (as appropriate). Display professionalism, customer service attitude, attention to detail and quality. Possess strong interpersonal skills, relationship management and negotiation skills, strong verbal, and written communication skills. Develop self and others through continuous learning, sharing best practices, knowledge, and expertise. Excellent management and leadership skills.<br><br>Language(s)<br><br>Fluent English #addjob

<p><h4>Job description</h4> <p>Directs Secure by Design (SbD) assessments across multiple projects simultaneously to ensure process abidance and thorough security integration.<br> Leads the development of SbD principles and controls to align organizational design practices with risk appetite and security frameworks.<br> Chairs security architecture governance forums to review high-risk designs and approve necessary exceptions or enhancements.<br> Evaluates new service proposals and existing systems to identify architectural weaknesses and support cost-effective risk treatment decisions.<br> Establishes a continuous remediation program for existing services to identify and prioritize the closure of security design gaps.<br> Collaborates with engineering and DevOps teams throughout the SDLC to integrate security patterns and ensure remediation plans are actionable.<br> Defines and evolves secure design standards and reference architectures to maintain alignment with ISO 27001, NIST, and PCI DSS requirements.<br> Communicates security expectations and residual risk exposures to technical and non-technical stakeholders to drive informed business decisions.<br> Produces comprehensive reporting on design-related vulnerability trends to provide leadership with visibility into the security design posture.<br> Mentors architecture and engineering teams on secure design best practices to promote security adoption within Agile and DevOps environments.</p> <h4>Skills description</h4> <p><strong>Interpersonal skills</strong></p> <ul> <li>Demonstrated leadership in steering cross-functional teams and influencing without direct authority.</li> <li>Effective coach and mentor for teams in adopting secure-by-design principles.</li> <li>Strong risk analysis, problem-solving and decision-making skills.</li> <li>Excellent communication skills to articulate complex security topics to varied audiences.</li> <li>Proven ability to build trust and collaborate with stakeholders across business and technology domains.</li> </ul> <p><strong>Technical skills</strong></p> <ul> <li>Deep understanding of security principles, secure architecture patterns, secure network design, threat modelling techniques, and system design.</li> <li>Knowledge of modern technology stacks including cloud platforms, APIs, microservices, identity and access management, and secure development practices.</li> <li>Experience managing security initiatives at scale, including tracking delivery, dependencies and risk mitigation outcomes.</li> <li>Capability to assess complex architectures and distil clear, actionable security recommendations.</li> <li>Ability to translate business strategy into a security design roadmap and priorities.</li> <li>Strong understanding of evolving threat landscapes and emerging technologies.</li> <li>Professional certifications such as CISSP, CCSP, SABSA, TOGAF, or relevant cloud security/architecture certifications.</li> </ul> <p><strong>Professional experience</strong></p> <ul> <li>10+ years of experience in cybersecurity or secure architecture roles, including significant experience with security design and remediation.</li> </ul> <p><strong>Management experience</strong></p> <ul> <li>5+ years</li> </ul> <p><strong>Educational background</strong></p> <ul> <li>Bachelor’s degree in Cyber Security, Computer Science, Information Technology or related field.</li> <li>Relevant certifications may include: <ul> <li>CISSP – Certified Information Systems Security Professional</li> <li>CISM – Certified Information Security Manager</li> <li>CRISC – Certified in Risk and Information Systems Control</li> <li>CISA – Certified Information Systems Auditor</li> <li>ISO 27001 Lead Implementer or Lead Auditor</li> </ul> </li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Information Security &amp; Risk Manager1. Job Details<p><strong>Position Title:</strong> Information Security &amp; Risk Manager<br><strong>Department:</strong> Technology Services / IT<br><strong>Reports To:</strong> Information Security / CTO<br><strong>Employment Type:</strong> Permanent<br><strong>Location:</strong> Maadi, Degla – On-site<br><strong>Grade:</strong> As per organizational structure<br><strong>Direct Reports:</strong> As per approved organizational structure</p><br>2. Job Purpose<p>The Information Security &amp; Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function. The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.</p><br><p>The role provides strategic and operational leadership across <strong>Information Security Governance, Risk &amp; Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness</strong>.</p><br>3. Key Accountabilities &amp; Deliverables<p>The role will be accountable for the development, implementation, and continuous improvement of:</p><br><ul><li>Information Security Strategy and Cybersecurity Roadmap</li><li>Information Security policies, standards, procedures, and guidelines</li><li>Information Security Management System (ISMS)</li><li>Enterprise IT and Cybersecurity Risk Register</li><li>Information Security Risk Assessment Reports</li><li>Risk Treatment and Remediation Plans</li><li>Security Compliance Reports, including ISO 27001 and applicable regulatory requirements</li><li>Cybersecurity Control Framework and Control Effectiveness Reports</li><li>Vulnerability Assessment and Penetration Testing (VAPT) Reports</li><li>Cybersecurity Incident Reports and Root Cause Analysis (RCA)</li><li>Security Monitoring and Threat Dashboards</li><li>Cybersecurity KPI and KRI Dashboards</li><li>Identity and Access Management (IAM) Policies, Models, and Access Matrices</li><li>Data Classification and Data Protection Framework</li><li>Internal and External Audit Reports and Evidence Repository</li><li>Audit Findings and Remediation Tracking</li><li>Business Continuity and Disaster Recovery (BCP/DR) Security Alignment</li><li>Security Awareness and Training Programs and Reports</li><li>Regulatory Assessments, submissions, and compliance evidence</li></ul>4. Key ResponsibilitiesA. Information Security Strategy &amp; Governance<ul><li>Define, develop, and execute the organization’s Information Security Strategy and cybersecurity roadmap.</li><li>Own and continuously improve the Information Security Management System (ISMS).</li><li>Develop and maintain information security policies, standards, procedures, and guidelines.</li><li>Establish effective cybersecurity governance frameworks aligned with business objectives.</li><li>Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership.</li><li>Establish and monitor security KPIs, KRIs, and performance metrics.</li><li>Ensure information security requirements are incorporated into technology initiatives, projects, and business processes.</li></ul>B. Information Security Risk Management<ul><li>Lead regular information security and cybersecurity risk assessments across the organization.</li><li>Own and maintain the enterprise IT and cybersecurity risk register.</li><li>Identify, assess, prioritize, and communicate information security risks.</li><li>Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure.</li><li>Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies.</li><li>Translate technical cybersecurity risks into business impact and communicate them effectively to senior management.</li><li>Monitor the organization’s overall cyber risk profile and provide recommendations for risk reduction.</li></ul>C. Security Operations &amp; SOC<ul><li>Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers.</li><li>Ensure effective security monitoring, threat detection, investigation, and response capabilities.</li><li>Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies.</li><li>Establish and monitor security incident management processes.</li><li>Review security alerts, incidents, trends, and threat intelligence.</li><li>Ensure appropriate escalation and response mechanisms are in place for critical security events.</li><li>Monitor and improve the effectiveness of security controls and operational processes.</li></ul>D. Cybersecurity Incident Response<ul><li>Lead the organization’s cybersecurity incident response capability.</li><li>Ensure effective detection, containment, eradication, recovery, and post-incident activities.</li><li>Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP).</li><li>Conduct regular incident response exercises and simulations.</li><li>Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed.</li><li>Track corrective and preventive actions resulting from security incidents.</li><li>Ensure lessons learned are incorporated into security controls and processes.</li></ul>E. Governance, Risk &amp; Compliance<ul><li>Lead Information Security Governance, Risk, and Compliance (GRC) activities.</li><li>Ensure compliance with applicable regulatory and industry requirements, including:<ul><li>National Cybersecurity Authority (NCA) requirements</li><li>Saudi Personal Data Protection Law (PDPL)</li><li>National Data Management Office (NDMO) requirements, where applicable</li><li>ISO/IEC 27001</li><li>Other applicable cybersecurity and data protection regulations</li></ul></li><li>Coordinate internal and external security audits and assessments.</li><li>Manage audit evidence collection and maintain an organized security evidence repository.</li><li>Track audit findings, remediation plans, and closure status.</li><li>Prepare management and regulatory compliance reports.</li><li>Support regulatory assessments, reviews, and submissions as required.</li></ul>F. Data Protection &amp; Privacy<ul><li>Establish and maintain data protection and information classification frameworks.</li><li>Ensure appropriate security controls are implemented for sensitive and personal data.</li><li>Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements.</li><li>Establish appropriate data access, handling, retention, and protection controls.</li><li>Support privacy and data protection risk assessments where required.</li></ul>G. Vulnerability &amp; Security Testing<ul><li>Oversee vulnerability management activities across IT environments.</li><li>Coordinate Vulnerability Assessments and Penetration Testing (VAPT).</li><li>Review vulnerability and penetration testing reports.</li><li>Ensure security vulnerabilities are appropriately prioritized based on business risk.</li><li>Track remediation activities and validate closure of critical and high-risk vulnerabilities.</li><li>Ensure security testing is incorporated into relevant technology projects and systems.</li></ul>H. Identity &amp; Access Management<ul><li>Establish and maintain IAM policies, standards, and access control frameworks.</li><li>Ensure appropriate access governance and segregation of duties.</li><li>Review privileged access and high-risk accounts.</li><li>Support periodic user access reviews and access recertification.</li><li>Ensure access controls align with business requirements and security policies.</li></ul>I. Security Awareness &amp; Culture<ul><li>Develop and implement an organization-wide security awareness program.</li><li>Lead cybersecurity awareness campaigns and security training.</li><li>Implement phishing simulation and social engineering awareness programs.</li><li>Monitor employee security awareness performance and identify improvement areas.</li><li>Promote a strong cybersecurity culture across all business functions.</li></ul>J. Business Continuity &amp; Disaster Recovery<ul><li>Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans.</li><li>Participate in BCP/DR risk assessments and exercises.</li><li>Ensure critical systems have appropriate security, recovery, and resilience controls.</li><li>Support testing and continuous improvement of security-related recovery procedures.</li></ul>5. Qualifications &amp; ExperienceMinimum Qualifications<ul><li>Bachelor’s degree in <strong>Information Technology, Computer Science, Cybersecurity, Information Security</strong>, or a related discipline.</li><li><strong>CISSP or CISM certification – Mandatory.</strong></li><li>ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.</li><li>NCA-related cybersecurity accreditation or certification is preferred.</li></ul>Minimum Experience<ul><li><strong>8–10 years of professional experience in Information Security / Cybersecurity.</strong></li><li>At least <strong>3 years of experience in a cybersecurity or information security management/leadership role.</strong></li><li>Proven experience managing enterprise cybersecurity programs and security teams.</li><li>Proven experience in GRC, risk management, security operations, and incident response.</li><li>Proven experience working with regulatory compliance, audits, and cybersecurity frameworks.</li></ul>6. Technical &amp; Professional Skills<p>The successful candidate should demonstrate:</p><br><ul><li>Strong knowledge of cybersecurity frameworks, standards, and best practices.</li><li>Deep understanding of <strong>NCA, PDPL, NDMO, ISO 27001</strong>, and applicable data protection requirements.</li><li>Strong expertise in Governance, Risk, and Compliance (GRC).</li><li>Experience with SOC operations and SIEM platforms such as <strong>Microsoft Sentinel, Splunk</strong>, or equivalent.</li><li>Strong understanding of vulnerability management and penetration testing.</li><li>Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP).</li><li>Strong understanding of IAM and access governance.</li><li>Knowledge of data protection, data classification, and data governance.</li><li>Strong understanding of secure architecture and security controls.</li><li>Ability to develop and monitor cybersecurity KPIs and KRIs.</li><li>Strong audit and regulatory assessment experience.</li><li>Ability to assess and communicate cybersecurity risks in terms of business impact.</li><li>Strong strategic thinking and high-level decision-making capability.</li><li>Excellent leadership and people-management skills.</li><li>Ability to manage cross-functional teams and stakeholders under pressure.</li><li>Strong communication, presentation, and reporting skills.</li><li><strong>Bilingual proficiency in Arabic and English.</strong></li></ul>7. Leadership Competencies<ul><li>Strategic Thinking</li><li>Cybersecurity Leadership</li><li>Risk-Based Decision Making</li><li>Stakeholder Management</li><li>Executive Communication</li><li>Team Leadership &amp; Development</li><li>Problem Solving</li><li>Crisis and Incident Management</li><li>Governance &amp; Accountability</li><li>Continuous Improvement</li><li>Business Acumen</li><li>Change Management</li></ul>Special Requirements<ul><li>Ability to work effectively in a fast-paced and dynamic environment.</li><li>Ability to manage cybersecurity incidents and critical security situations.</li><li>Willingness to participate in security incident response and escalation activities when required.</li><li>Strong confidentiality and professional integrity.</li><li>Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders.</li></ul> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Information Security &amp; Risk Manager1.<br> Job Details Position Title: Information Security &amp; Risk Manager Department: Technology Services / IT Reports To: Information Security / CTO Employment Type: Permanent Location: Maadi, Degla – On-site Grade: As per organizational structure Direct Reports: As per approved organizational structure 2.<br> Job Purpose The Information Security &amp; Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function.<br> The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.<br> The role provides strategic and operational leadership across Information Security Governance, Risk &amp; Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness .<br> 3. Key Accountabilities &amp; Deliverables The role will be accountable for the development, implementation, and continuous improvement of: Information Security Strategy and Cybersecurity Roadmap Information Security policies, standards, procedures, and guidelines Information Security Management System (ISMS) Enterprise IT and Cybersecurity Risk Register Information Security Risk Assessment Reports Risk Treatment and Remediation Plans Security Compliance Reports, including ISO 27001 and applicable regulatory requirements Cybersecurity Control Framework and Control Effectiveness Reports Vulnerability Assessment and Penetration Testing (VAPT) Reports Cybersecurity Incident Reports and Root Cause Analysis (RCA) Security Monitoring and Threat Dashboards Cybersecurity KPI and KRI Dashboards Identity and Access Management (IAM) Policies, Models, and Access Matrices Data Classification and Data Protection Framework Internal and External Audit Reports and Evidence Repository Audit Findings and Remediation Tracking Business Continuity and Disaster Recovery (BCP/DR) Security Alignment Security Awareness and Training Programs and Reports Regulatory Assessments, submissions, and compliance evidence 4.<br> Key ResponsibilitiesA.<br> Information Security Strategy &amp; Governance Define, develop, and execute the organization’s Information Security Strategy and cybersecurity roadmap.<br> Own and continuously improve the Information Security Management System (ISMS).<br> Develop and maintain information security policies, standards, procedures, and guidelines.<br> Establish effective cybersecurity governance frameworks aligned with business objectives.<br> Provide regular reporting on cybersecurity posture, risk exposure, compliance, and security program performance to the CTO and executive leadership.<br> Establish and monitor security KPIs, KRIs, and performance metrics.<br> Ensure information security requirements are incorporated into technology initiatives, projects, and business processes.<br> B. Information Security Risk Management Lead regular information security and cybersecurity risk assessments across the organization.<br> Own and maintain the enterprise IT and cybersecurity risk register.<br> Identify, assess, prioritize, and communicate information security risks.<br> Develop and manage risk treatment plans and ensure remediation activities are tracked through to closure.<br> Work closely with business units, IT, and other stakeholders to establish appropriate risk mitigation strategies.<br> Translate technical cybersecurity risks into business impact and communicate them effectively to senior management.<br> Monitor the organization’s overall cyber risk profile and provide recommendations for risk reduction.<br> C. Security Operations &amp; SOC Oversee Security Operations Centre (SOC) activities, including SOC Analysts and Security Engineers.<br> Ensure effective security monitoring, threat detection, investigation, and response capabilities.<br> Oversee SIEM operations and security monitoring platforms such as Microsoft Sentinel, Splunk, or equivalent technologies.<br> Establish and monitor security incident management processes.<br> Review security alerts, incidents, trends, and threat intelligence.<br> Ensure appropriate escalation and response mechanisms are in place for critical security events.<br> Monitor and improve the effectiveness of security controls and operational processes.<br> D. Cybersecurity Incident Response Lead the organization’s cybersecurity incident response capability.<br> Ensure effective detection, containment, eradication, recovery, and post-incident activities.<br> Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan (CIRP).<br> Conduct regular incident response exercises and simulations.<br> Lead investigations into significant security incidents and ensure Root Cause Analysis (RCA) is completed.<br> Track corrective and preventive actions resulting from security incidents.<br> Ensure lessons learned are incorporated into security controls and processes.<br> E. Governance, Risk &amp; Compliance Lead Information Security Governance, Risk, and Compliance (GRC) activities.<br> Ensure compliance with applicable regulatory and industry requirements, including: National Cybersecurity Authority (NCA) requirements Saudi Personal Data Protection Law (PDPL) National Data Management Office (NDMO) requirements, where applicable ISO/IEC 27001 Other applicable cybersecurity and data protection regulations Coordinate internal and external security audits and assessments.<br> Manage audit evidence collection and maintain an organized security evidence repository.<br> Track audit findings, remediation plans, and closure status.<br> Prepare management and regulatory compliance reports.<br> Support regulatory assessments, reviews, and submissions as required.<br> F. Data Protection &amp; Privacy Establish and maintain data protection and information classification frameworks.<br> Ensure appropriate security controls are implemented for sensitive and personal data.<br> Work with relevant stakeholders to support compliance with PDPL and applicable data protection requirements.<br> Establish appropriate data access, handling, retention, and protection controls.<br> Support privacy and data protection risk assessments where required.<br> G. Vulnerability &amp; Security Testing Oversee vulnerability management activities across IT environments.<br> Coordinate Vulnerability Assessments and Penetration Testing (VAPT).<br> Review vulnerability and penetration testing reports.<br> Ensure security vulnerabilities are appropriately prioritized based on business risk.<br> Track remediation activities and validate closure of critical and high-risk vulnerabilities.<br> Ensure security testing is incorporated into relevant technology projects and systems.<br> H. Identity &amp; Access Management Establish and maintain IAM policies, standards, and access control frameworks.<br> Ensure appropriate access governance and segregation of duties.<br> Review privileged access and high-risk accounts.<br> Support periodic user access reviews and access recertification.<br> Ensure access controls align with business requirements and security policies.<br> I. Security Awareness &amp; Culture Develop and implement an organization-wide security awareness program.<br> Lead cybersecurity awareness campaigns and security training.<br> Implement phishing simulation and social engineering awareness programs.<br> Monitor employee security awareness performance and identify improvement areas.<br> Promote a strong cybersecurity culture across all business functions.<br> J. Business Continuity &amp; Disaster Recovery Ensure cybersecurity requirements are incorporated into Business Continuity and Disaster Recovery plans.<br> Participate in BCP/DR risk assessments and exercises.<br> Ensure critical systems have appropriate security, recovery, and resilience controls.<br> Support testing and continuous improvement of security-related recovery procedures.<br> 5. Qualifications &amp; ExperienceMinimum Qualifications Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security , or a related discipline.<br> CISSP or CISM certification – Mandatory.<br> ISO/IEC 27001 Lead Implementer or Lead Auditor certification preferred.<br> NCA-related cybersecurity accreditation or certification is preferred.<br> Minimum Experience 8–10 years of professional experience in Information Security / Cybersecurity.<br> At least 3 years of experience in a cybersecurity or information security management/leadership role.<br> Proven experience managing enterprise cybersecurity programs and security teams.<br> Proven experience in GRC, risk management, security operations, and incident response.<br> Proven experience working with regulatory compliance, audits, and cybersecurity frameworks.<br> 6. Technical &amp; Professional Skills The successful candidate should demonstrate: Strong knowledge of cybersecurity frameworks, standards, and best practices.<br> Deep understanding of NCA, PDPL, NDMO, ISO 27001 , and applicable data protection requirements.<br> Strong expertise in Governance, Risk, and Compliance (GRC).<br> Experience with SOC operations and SIEM platforms such as Microsoft Sentinel, Splunk , or equivalent.<br> Strong understanding of vulnerability management and penetration testing.<br> Strong knowledge of Incident Response and Cybersecurity Incident Response Plans (CIRP).<br> Strong understanding of IAM and access governance.<br> Knowledge of data protection, data classification, and data governance.<br> Strong understanding of secure architecture and security controls.<br> Ability to develop and monitor cybersecurity KPIs and KRIs.<br> Strong audit and regulatory assessment experience.<br> Ability to assess and communicate cybersecurity risks in terms of business impact.<br> Strong strategic thinking and high-level decision-making capability.<br> Excellent leadership and people-management skills.<br> Ability to manage cross-functional teams and stakeholders under pressure.<br> Strong communication, presentation, and reporting skills.<br> Bilingual proficiency in Arabic and English.<br> 7. Leadership Competencies Strategic Thinking Cybersecurity Leadership Risk-Based Decision Making Stakeholder Management Executive Communication Team Leadership &amp; Development Problem Solving Crisis and Incident Management Governance &amp; Accountability Continuous Improvement Business Acumen Change Management Special Requirements Ability to work effectively in a fast-paced and dynamic environment.<br> Ability to manage cybersecurity incidents and critical security situations.<br> Willingness to participate in security incident response and escalation activities when required.<br> Strong confidentiality and professional integrity.<br> Ability to work collaboratively with executive leadership, IT, business functions, auditors, and regulatory stakeholders.<br></span> </div>

Objective: (summary about the position)<br><br>Seeking a highly experienced Security Lead Engineer to lead the design, implementation, and continuous improvement of cybersecurity measures across our hybrid environment. This role requires overseeing infrastructure, application, and cloud security; managing threat detection and response systems; guiding the security posture of internally developed software; and ensuring regulatory compliance through GRC frameworks. The ideal candidate brings technical depth, leadership capabilities, and a proactive mindset to protect our digital assets and business operations.<br><br>Responsibilities:<br><br> Security Architecture & Strategy Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments Ensure secure network topology including segmentation, access control, and VPN tunnels Lead development and enforcement of security policies, procedures, and best practices Work closely with developers and IT architects to embed security into application and infrastructure design SOC, SIEM, and Threat Management Oversee the operation and tuning of Security Operations Center (SOC) including SIEM platforms Manage endpoint protection through EDR and threat-hunting solutions Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies Lead incident response efforts and develop threat prevention strategies Application and Cloud Security Supervise vulnerability scanning and penetration testing for internally developed applications Lead WAF deployment and optimization to protect business-critical web applications Implement security best practices and policy enforcement across multi-cloud environments Governance, Risk & Compliance (GRC) Drive cybersecurity-related compliance programs (e.g., SOC 2 Type 2, ISO 27001) Lead cross-functional GRC initiatives and support internal/external audits Manage security risk assessments and recommend mitigation strategies Documentation & Collaboration Maintain detailed documentation for security controls, policies, systems, and incidents Plan and conduct quarterly security awareness sessions to educate staff on emerging cyber threats, security best practices, and the organization's security policies Work collaboratively with software engineers, network teams, Dev Ops, and business units<br><br>Requirements<br><br>Min requirements:<br><br> Education: Bachelor's degree in engineering, Computer Science, Information Security or a related field Experience: 7 years in cybersecurity and information security roles 5+ years of hands-on experience in security architecture and threat management Qualifications necessary for the vacancy Proven expertise in: Security architecture for hybrid cloud/on-prem setups Firewalls, WAF, EDR, SIEM, UTM, IPS, Proxy, and DDoS mitigation Network security protocols, subnetting, VPNs, and access control models Set of skills necessary for the vacancy Problem-Solving and Analytical Skills: Ability to diagnose and resolve complex technical issues efficiently Skilled in designing and implementing scalable and secure IT solutions Organizational Skills: Strong ability to manage multiple projects and prioritize tasks effectively Commitment to meeting deadlines and maintaining high-quality standards Communication and Teamwork: Excellent written and verbal communication skills Ability to collaborate effectively with team members and stakeholders Certifications (Desirable): CISSP, CISM, CEH, OSCP, CCSP Cloud security certifications (e.g., AWS Security Specialty, Microsoft SC-100/SC-200) IT governance certifications (e.g., ISO 27001 LA, CISA)

Establishes and maintains company-wide security audit frameworks, data loss prevention governance, and compliance standards. Architectures continuous compliance audit frameworks and automated verification standards across all operational departments. Oversees multi-departmental compliance evaluations, assessing system security risks and governance alignment prior to major releases. Drives cross-functional initiatives to resolve systematic compliance gaps and structural data-handling risks. Defines high-level security compliance indicators and reports on enterprise risk exposure to executive leadership. <br><br><br>Requirements<br><br>Bachelor's degree in Computer Science, Computer Engineering, or a related field8-11 years of experience in security assurance and auditing Strong analytical and problem-solving skills with high attention to detail

About us:<br><br>At MTS (Misr Technology Services), we aren't just building software; we are building the digital backbone of Egypt’s global trade. As the architects behind Nafeza, Egypt’s National Single Window for Foreign Trade, we’ve taken on the monumental task of consolidating and automating the country’s entire trade ecosystem into one highperformance, unified platform.<br><br>Job Summary:<br><br>The Junior Information Security Analyst supports the organization’s Information Security and Cybersecurity posture by assisting in monitoring, analyzing, and improving security controls across the MTS environment.<br><br>This role is entry to mid-level and focuses on learning, supporting daily security operations, and assisting senior team members in identifying vulnerabilities, investigating alerts, and implementing security best practices.<br><br>The incumbent will work closely with internal IT teams, vendors, and stakeholders to ensure timely and effective handling of security-related tasks while developing technical and analytical skills in cybersecurity.<br><br>Responsibilities:<br><br>Assist in monitoring security tools and systems to detect and respond to alerts Support vulnerability assessments and basic security reviews Assist in analyzing security threats and incidents under supervision Help in reviewing application security practices and identifying basic gaps Support Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) activities Work with Application Engineering teams to follow secure coding practices Assist in reviewing user access and supporting access control processes Participate in incident response activities and documentation Support preparation of security reports and dashboards Help maintain and update security policies, procedures, and documentation Participate in security awareness initiatives and training programs Collaborate with Security Operations Center (SOC) in monitoring and initial analysis of alerts Stay updated on basic cybersecurity trends, threats, and vulnerabilities Follow documented procedures to support incident handling and remediation activities<br><br>Qualifications:<br><br>0–2 years of experience in IT or Information Security (internships count) Bachelor’s degree in Computer Science, Information Systems, or related field Entry-level certifications are a plus (e.g., Security+, CEH, e JPT) Willingness to pursue advanced certifications (e.g., CISSP, OSCP) in the future0–2 years of experience in IT or Information Security (internships count) Basic understanding of Information Security concepts and principles Familiar with OWASP Top 10 (basic knowledge) Basic knowledge of SAST / DAST concepts Basic understanding of Identity and Access Management (IAM) Familiar with general IT infrastructure (networks, systems) Basic knowledge of cybersecurity frameworks (e.g., NIST – awareness level) Willingness to learn and develop in the cybersecurity field Good analytical and problem-solving skills Good communication skills (written and verbal) Ability to work in a team environment<br><br>Powered by Jazz HR<br><br>f YYTSra SA2

We are seeking a Mid-Senior Infosec / Compliance Specialist to lead and strengthen security, identity, governance, and compliance initiatives across cloud-native and enterprise environments. The role focuses on identity federation, access governance, Dev Sec Ops security controls, cloud security, and audit readiness while ensuring adherence to industry-recognized compliance frameworks and best practices.<br>The Key Responsibilities are:Architect enterprise Single Sign-On (SSO) solutions using Keycloak, SAML 2.0, and Open ID Connect (OIDC). Configure Microsoft Entra ID (Azure AD) and Google Cloud Identity as identity brokers. Establish centralized Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security policies across all platform boundaries. Manage Git Hub Advanced Security (GHAS) initiatives, including enforcement of Dependabot alerts, secret scanning, static code analysis (Code QL/SAST), and branch protection rules. Implement portable secrets management and monitor service-to-service security mechanisms such as mutual TLS (m TLS) across Kubernetes cluster boundaries. Lead audit readiness activities, vulnerability scanning programs, and compliance enforcement initiatives for frameworks such as SOC 2 and ISO 27001. Collaborate with engineering, platform, and operations teams to ensure security controls are embedded throughout the software development lifecycle. Support continuous improvement of organizational security posture through governance, risk management, and compliance best practices.<br>Requirements Bachelor’s degree in Computer Science, Software Engineering, or a related field. Minimum 5 years of experience in Information Security, Identity and Access Management (IAM), Compliance, Dev Sec Ops, or a related field. Deep experience with Keycloak administration, realm configuration, user federation, and Identity Provider (IdP) mapping. Strong knowledge of Microsoft Entra ID enterprise applications and Google Identity Platform. Experience enforcing security policies across multi-tenant Kubernetes clusters and cloud boundaries. Familiarity with Git Hub Advanced Security and Dev Sec Ops automated tooling. Strong understanding of SAML 2.0, Open ID Connect (OIDC), identity federation, and authentication protocols. Experience implementing RBAC, MFA, Zero Trust architectures, and cloud security best practices. Knowledge of vulnerability management, audit readiness processes, and compliance frameworks such as SOC 2 and ISO 27001. Excellent analytical, problem-solving, and risk assessment skills. Excellent English communication skills. Ability to work effectively with cross-functional and globally distributed teams. Availability to work from 11:00 AM to 8:00 PM.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Job Purpose</strong><br> Lead and manage information security across the organization, ensuring compliance with policies, maintaining ISO 27001 certification, and protecting business systems and data.</p><br> <p><strong>Core Responsibilities<br> </strong>Information Security Governance &amp; Compliance:<br> – Maintain the Information Security Management System (ISMS) and ensure ISO 27001 certification<br> – Ensure compliance with policies, standards, and procedures<br> – Manage risk register and track mitigation actions<br> – Lead ISO audits and resolve observations and non-conformances</p><br> <p>Risk &amp; Incident Management:<br> – Establish and manage information security incident response processes<br> – Conduct root cause analysis and implement corrective actions<br> – Identify vulnerabilities and coordinate mitigation activities</p><br> <p>Business Continuity &amp; Disaster Recovery:<br> – Develop and test Disaster Recovery Plans (DRP)<br> – Lead Business Continuity Planning (BCP) processes</p><br> <p>Security Operations &amp; Controls:<br> – Ensure effective security controls across IT infrastructure<br> – Manage credential and access control processes<br> – Work with IT and vendors to identify and mitigate risks</p><br> <p>Awareness &amp; Training:<br> – Develop and deliver security awareness training programs<br> – Ensure staff understanding of Acceptable Use Policies (AUP)</p><br> <p>Stakeholder Collaboration:<br> – Act as advisor to IT leadership<br> – Collaborate with internal teams and external partners<br> – Communicate risks and security issues effectively</p><br> <p><strong>Skills &amp; Experiences </strong><br> 8+ years of experience in information security<br> Strong knowledge of security threats (malware, phishing, ransomware, DDOS)<br> Experience with ISO 27001 and ISMS frameworks<br> Strong understanding of networking and infrastructure security<br> Experience with Windows, Linux, Mac OS, iOS, Android<br> Familiarity with Azure, AWS, SQL, Active Directory, VPNs<br> Strong communication and stakeholder management skills<br> High level of integrity and confidentiality</p><br> <p><strong>Core Competencies</strong><br> Analytical thinking<br> Risk management<br> Attention to detail<br> Communication and influencing skills<br> Leadership and accountability<br> Problem-solving mindset</p><br> <br> </div>

Security and Safety Experience in Manufacturing industry 3 to 5 years <br>The role: (2-3 sentences as explanatory introduction) The Security Supervisor is responsible for leading and coordinating security personnel, ensuring that all security operations are conducted effectively, safely, and in compliance with internal policies and regulatory requirements. This role acts as the first-line leadership for security teams, providing guidance, supervision, and operational oversight.<br>Your responsibilities: (maximum 10 points) Supervise and oversee the safety and security of all guests, personnel, and property under the manager's command. Assist in the control of the public to maintain order and security. Ensure passenger security in the station. Prevent unauthorized access to the system. Provide a deterrent to vandalism and inappropriate behavior of persons inside the stations. Assist in other station activities, e.g., crowd control. Support the Security and Traffic Management (STM) in case of an emergency or station evacuation. Supervise and coordinate the activities of security guards. Conduct regular inspections to ensure compliance with security protocols and procedures. Train and mentor security guards, guiding safety practices and protocols. Your profile/ qualifications: (maximum 10 points) Technical degree in a relevant field. Minimum 2 years of experience in the security or related field. Proven knowledge of all aspects of compliance. Relevant certification in security is preferred. Affinity with security measures and protocols. Arabic native speaker. High level of discipline. No objection to prosecution or any judicial record. Proven time management and organizational skills, effectively prioritizing tasks and meeting deadlines. Advanced written and spoken English, enabling effective communication.

<h2>Job Summary:</h2><p>We are seeking a highly motivated and results-driven <strong>Security Engineer</strong> to join our growing team. The ideal candidate shall act as a hybrid professional combining strong <strong>cybersecurity</strong> expertise, <strong>data encryption</strong> and protection knowledge, and hands-on field implementation capabilities. The role will involve driving the secure deployment, integration, and protection of IT infrastructure and security solutions across MIS’s enterprise clients, including experience with <strong>Thales security solutions</strong> and enterprise-grade security platforms.</p><h2>Key Responsibilities:</h2><ul><li><p>Design, deploy, and manage <strong>network and cybersecurity</strong> solutions.</p></li><li><p>Identify and define system security requirements.</p></li><li><p>Develop and implement cybersecurity architectures and designs.</p></li><li><p>Configure, monitor, and troubleshoot data security infrastructure.</p></li><li><p>Implement <strong>data encryption</strong> solutions to protect data</p></li><li><p>Prepare and maintain security documentation and standard procedures.</p></li><li><p>Develop tools and automation to reduce vulnerabilities and improve efficiency.</p></li><li><p>Respond to and manage security incidents to ensure rapid detection and resolution.</p></li><li><p>Collaborate with teams to support security and protection solutions.</p></li></ul><p></p>

Job Summary:Responsible for monitoring and analyzing an organization’s security posture on an ongoing basis. Managing SOC team’s goal to detect, analyze, and respond to cybersecurity incidents using a combination of technology solutions and a strong set of processes in order to ensure Maintaining the confidentiality, integrity and availability of business data and protect the bank information<br>Job Responsibilities:Lead SOC team to Act upon security & operational issues/incidents within a 24x7 Managed Security Service Environment. Lead the process of Investigation and analyzing security incidents to determine the root cause, impact, and potential remediation actions. Provide guidance and support to other IT teams and stakeholders on security incident response and remediation. Stay up to date with the latest cybersecurity threats and trends and implement necessary security measures to protect against them. Collaborate with other IT teams and stakeholders to ensure successful incident response and remediation. Propose, analyze, and introduce new technologies or products to increase the information security level (based on defined risks) Coordinate and support the containment and eradication of security incidents. Provide consultancy to internal and external parties in order to reduce the impact of security incidents. Lead SOC team to design/implement/document security operation center processes and procedures. Ensure applying SOC recommended security controls/countermeasures on security devices/system. Create of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. Follow up Incident resolutions for various offenses/incidents. Ensure compliance with SLA, process adherence and process improvisation to achieve security operational center objectives. Lead Security Operation Center team to Perform threat management, threat modelling,Continually assess the overall effectiveness of Security Monitoring solutions. Lead the cyber security threat intelligence and threat hunting activities. <br>Job Qualifications:Bachelor’s degree in computer science or Equivalent Minimum 10 year’s professional IT experience Experience in Information Security Standard “IS0 27xx, PCI”Experience in security device management and SIEMExperience in Security Scans and take required actions/controls

Job Summary:<br>The Cybersecurity Engineer will handle cybersecurity incidents and tickets, support security tools and controls, and coordinate with IT teams, vendors, and the SOC to maintain a secure technology environment.<br>Responsibilities:<br>Administer and support security platforms, including EDR/XDR, firewalls, IDS/IPS, email security, vulnerability management, and cloud security tools. Operate and support Microsoft security technologies, including Microsoft Defender, Defender for Endpoint, Defender for Office 365, Defender for Cloud, Entra ID, Intune, and related Microsoft 365 security controls. Monitor security platform health, including agent and connector coverage, configurations, integrations, licensing, and platform availability. Investigate security alerts and incidents, perform approved containment and remediation activities, and support root-cause analysis. Manage cybersecurity tickets through the approved IT Service Management (ITSM) platform, ensuring appropriate prioritization, documentation, escalation, resolution, and closure. Implement approved security changes, including firewall rules, endpoint policies, threat indicators, access controls, exclusions, upgrades, and configuration updates. Support cloud and application security tools, including CSPM, DAST, SAST, vulnerability scanning, API security, and CI/CD security integrations. Integrate security platforms and log sources with SIEM and outsourced SOC, troubleshoot logging gaps, and support security incident escalations. Maintain accurate technical documentation, platform inventories, configuration backups, operating procedures, and security metrics. Collaborate with Infrastructure, Network, Cloud, Application, and Vendor teams to resolve security gaps and continuously improve the effectiveness of security controls.<br>Knowledge, Skills & Experience:<br>Bachelor’s degree in communications engineering, Computer Science, or a related field.2–3 years of hands-on experience in cybersecurity, security operations, security engineering, or a related field. Practical experience with enterprise EDR/XDR, firewalls, Microsoft security technologies, vulnerability management tools, and cloud security controls. Experience handling security incidents, cybersecurity tickets, technical changes, troubleshooting, and vendor escalations. Good knowledge of networking, Windows security, Active Directory, Azure, Microsoft 365, and security logging. Relevant certifications such as Microsoft, Fortinet, Crowd Strike, Palo Alto Networks, or equivalent certifications are preferred. Strong troubleshooting, analytical, documentation, communication, and ownership skills. Ability to work effectively with internal technical teams, vendors, and an outsourced SOC. Strong attention to detail and ability to prioritize and manage multiple security incidents and requests.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Mission <br><p><b>JOB PURPOSE:&nbsp;</b></p><br><br><p>The Cybersecurity GRC Engineer plays a critical dual role in safeguarding the organization’s digital assets while advancing its cybersecurity governance maturity. This position is responsible for detecting and responding to threats, managing vulnerabilities, and maintaining core security infrastructure. Simultaneously, the role ensures alignment with regulatory standards and cybersecurity frameworks by managing risk, enforcing compliance, and supporting audit readiness. By integrating operational defense with strategic risk oversight, the engineer contributes to a secure, resilient, and regulation-compliant environment that supports business continuity and digital trust.</p><br><br> Profile <p><b>RESPONSIBILITIES/DUTIES&nbsp;</b></p><br><br><p><b>Cybersecurity Operations</b></p><br><br><p>•Perform root cause analysis and assist in remediation of security breaches.</p><br><br><p>•Conduct vulnerability assessments and ensure timely patching and configuration updates.</p><br><br><p>•Collaborate with IT teams to safeguard systems, networks, and cloud environments.</p><br><br><p><b>Governance, Risk &amp; Compliance (GRC)</b></p><br><br><p>•Develop and enforce security policies, procedures, and standards aligned with ISO 27001, NIST, and internal audit requirements.</p><br><br><p>•Maintain the information security risk register and manage control assessments.</p><br><br><p>•Support third-party risk assessments and internal/external audit readiness.</p><br><br><p>•Perform risk and impact assessments for IT and business processes, proposing mitigation plans.</p><br><br><p>•Monitor compliance with data protection laws, regulatory standards, and internal controls.</p><br><br><p>•Develop cybersecurity awareness content and promote a risk-aware culture.</p><br><br><p><b>Security Monitoring, Metrics &amp; Reporting</b></p><br><br><p>•Build dashboards and metrics for key risk indicators (KRIs) and performance indicators (KPIs).</p><br><br><p>•Provide reports on incident response, compliance gaps, and control effectiveness.</p><br><br><p>•Ensure documentation of security incidents, investigations, and preventive actions.</p><br><br><p>•Support change management processes by reviewing technical risks and security implications of system modifications.</p><br><br><p><b>Continuous Improvement &amp; Research</b></p><br><br><p>•Stay updated on cybersecurity trends, technologies, and threat intelligence.</p><br><br><p>•Recommend tools and best practices to enhance detection, prevention, and recovery capabilities.</p><br><br><p>•Participate in cybersecurity projects, system upgrades, and cross-departmental initiatives.</p><br><br><p>•Drive maturity improvement by contributing to gap analyses, self-assessments, and capability building.</p><br><br><p><b>ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><br><br><p><b>QUALIFICATIONS:</b></p><br><br><p>•Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.</p><br><br><p>•Relevant certifications such as:</p><br><br><p>oTechnical Security: CompTIA Security+, CEH, eJPT, ECIR, or GIAC.</p><br><br><p>oGRC &amp; Risk: CRISC, ISO 27001 Lead Implementer/Auditor.</p><br><br><p>•Fluent in English and Arabic, French is a plus.</p><br><br><p><b>KNOWLEDGE:</b></p><br><br><p>•Strong grasp of cybersecurity principles, risk assessment, incident response, and threat intelligence.</p><br><br><p>•Familiarity with industry frameworks: ISO 27001, NIST CSF, CIS Controls.</p><br><br><p>•Good understanding of IT infrastructure, access control, networking protocols (TCP/IP, DNS, HTTP), and Active Directory.</p><br><br><p>•Working knowledge of scripting (e.g., PowerShell, Python, Bash) is a plus.</p><br><br><p><b>EXPERIENCE:</b></p><br><br><p>•3-5 years of experience in cybersecurity or GRC, preferably within a large or regulated organization.</p><br><br><p>•Practical involvement in security operations, compliance audits, vulnerability assessments, and control implementations.</p><br><br><p>•Experience handling internal and external assessments, including ISO audits and risk evaluations.</p><br><br><p>•Exposure to Operational Technology (OT)/IACS environments is a strong advantage.</p><br><br><p>•Experience with third-party risk management and security audits.</p><br><br><p>•Experience using security technologies: SIEM, firewalls, IDS/IPS, EDR, vulnerability management platform.</p><br><br><p><b>DESIRED BEHAVIORS</b></p><br><br><p>•Security-first mindset with a high sense of integrity, responsibility, and ethical conduct.</p><br><br><p>•Critical thinker who applies analytical skills to diagnose risks and resolve security challenges effectively.</p><br><br><p>•Detail-oriented, especially when evaluating incidents, documentation, and compliance requirements.</p><br><br><p>•Communicates with impact, able to translate technical risks into understandable business terms across all levels.</p><br><br><p>•Collaborative team player who fosters alignment between cybersecurity, IT, and business functions.</p><br><br><p>•Proactive learner who stays current with evolving threat landscapes, compliance standards, and best practices.</p><br><br><p>•Resilient and organized under pressure, capable of balancing multiple tasks while meeting deadlines.</p><br><br><p>•Persuasive and assertive, driving security adoption across the organization without compromising stakeholder relationships.</p><br><br><p>•Comfortable with ambiguity, and adaptable to evolving priorities in a dynamic cybersecurity landscape.</p><br><br><br> </div>

We are seeking an Info Sec Intern to join and support our Security Operations Center (SOC) team.

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Publication date :</strong> Sep 18, 2026, 12:00AM</p><br><br>Orange Business is here!<br>About us<p>Join us at Orange Business!<br>We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.<br>Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.</p><br><br>About the role<span>In this role, you will be in charge of</span><p><span>As a key player in ensuring confidence in our information security management system, you will be the overall guarantor of the security of our cloud administration infrastructure. You will join the security office and take on the role of delegated CISO for your area (also known as Business Security Officer service). As a Business Security Officer service (BSO service), you'll be constantly on the lookout for threats that could impact your area of responsibility, and your expertise will be the subject of industry-recognized certifications.</span></p><br><br><p><span>At the crossroads of the key issues for the success of the cloud (security and reliability), the Business Security Officer is involved in a wide variety of activities, for which the qualities of analysis and flexibility are essential.</span></p><br><br><p><span>Would you like to find out more? Your mission is diverse (your expertise in all the different fields is not a prerequisite for your application):</span></p><br><br><ul><li><span>Carry out expert assessment and consultancy work (risk analysis, pen-testing, vulnerability audits, etc.)</span></li><li><span>Ensure that Orange builds and operates the service in accordance with management's security requirements.</span></li><li><span>Act as an expert security advisor to operational teams,</span><ul><li><span>In particular, you will set up the necessary documentation and controls,</span></li><li><span>Report on the status of the service in terms of security,</span></li><li><span>Coordinate the management of security incidents,</span></li><li><span>You raise awareness among operational staff and remind them of the safety rules to be followed.</span></li></ul></li><li><span>Helps to continuously improve Orange security practices in conjunction with peers in a logic of control and continuous improvement (Plan-Do-Check-Act).</span></li></ul><br><span>In particular, your mission will focus on security management, thus:</span><ul><li><span>Risk analysis, vulnerability analysis, security assurance plan and indicator monitoring;</span></li><li><span>Follow-up of external audits, implementation of security control points, reviews with cloud operational teams, awareness-raising for these same teams, security reviews, analysis of security incidents and architecture or process analyses for security improvement proposals.</span></li><li><span>Follow-up of action plans linked to the various controls and analyses conducted.</span></li></ul><br>About you<span>About you</span><ul><li><span>Bachelors in engineering or related field with 5+ years in IT/Network/Security operations</span></li><li><span>Knowledge of information security principles and CISSP or CISM best practices.</span></li><li><span>Good understanding of security methods like ISO 27K</span></li><li><span>Demonstrated leadership skills and ability to drive continuous improvement.</span></li><li><span>Exceptional communication, presentation, and stakeholder engagement abilities.</span></li><li><span>Strong analytical, organizational, and critical thinking skills; capable of multitasking.</span></li><li><span>Skilled in risk analysis and reporting for strategic decision-making.</span></li><li><span>Fluent in English; French proficiency is a significant asset.</span></li></ul><br><p>You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.</p><br><br>What we offer<p><strong>• Global Opportunities:</strong> Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.<br><strong>• Flexible Work Environment:</strong> Flexible working hours and possibility to combine work from office and home (hybrid ways of working).<br><strong>• Professional Development:</strong> training programs and upskilling/re-skilling opportunities.<br><strong>• Career Growth:</strong> Internal growth and mobility opportunities within Orange.<br><strong>• Caring and Daring Culture:</strong> Health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events.<br><strong>• Reward Programs:</strong> Employee Referral Program, Change Maker Awards.</p><br><br>Only your skills matterRegardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.<p> At Orange, only your skills matter. </p><br><br> <p> Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation.Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have. </p><br><br><br> </div>

<p><strong>Company Description</strong> Aarcalev Technology Solutions helps organizations across India, the Middle East, Africa, and Europe build secure, resilient, and compliant digital ecosystems through specialized Cybersecurity Advisory and Compliance services. The company is led by Ms. Sireesha Dandu, a Forbes Technology Council member and cybersecurity leader with over 18 years of global experience, supported by a leadership team with Big4 and enterprise backgrounds. Aarcalev delivers GRC and regulatory compliance advisory, cybersecurity consulting, and assessment and audit services covering standards such as ISO 27001, PCI DSS, GDPR, CERT-IN, DPDP, PDPL, SAMA, NCA ECC, NDPA, and CBN IT standards. With a focus on global expertise combined with local compliance knowledge, Aarcalev provides independent, transparent, and tailored solutions to organizations of all sizes. Its mission is to prepare, protect, and empower clients to thrive securely and confidently in the digital era.</p><p><br></p><p>Senior GRC / Information Security Compliance Expert</p><p> Location: Cairo, Egypt</p><p> Work Location: Cairo</p><p>⏱️ Experience: 5 Years+</p><p> Joining: Immediate / Urgent Requirement</p><p> Key Requirements</p><p>We are looking for experienced GRC professionals with strong practical experience in Information Security Governance, Risk Management, Compliance, Auditing, and Regulatory Frameworks.</p><p>Candidates should have hands-on experience with several of the following:</p><p>International Frameworks &amp; Standards</p><p>✅ISO/IEC 27001:2022</p><p>✅NIST Cybersecurity Framework</p><p>✅NIST SP 800-series</p><p>✅SOC 2</p><p>✅PCI-DSS</p><p>✅Risk Management Frameworks</p><p>✅Information Security Governance &amp; Compliance</p><p>✅Security Risk Assessments</p><p>✅Internal / External Audit Preparation</p><p>✅Policies, Procedures, Controls &amp; SOA</p><p>✅Control Mapping and Gap Assessments</p><p>✅Egyptian Centra Bank of Egypt framework</p><p>✅Egyptian data protection and privacy requirements</p><p>✅Egyptian cybersecurity / information security regulatory requirements</p><p>✅Ability to map international frameworks to Egyptian requirements</p><p><br></p><p> Responsibilities</p><p>✅Lead and execute GRC assessments and compliance projects</p><p>✅Perform gap assessments and maturity assessments</p><p>✅Develop and review information security policies and procedures</p><p>✅Perform risk assessments and risk treatment</p><p>✅Develop and maintain Statement of Applicability (SOA)</p><p>✅Map controls across ISO 27001, NIST, SOC 2, PCI-DSS, NCA ECC, SAMA, PDPL, CST CRF and other frameworks</p><p>✅Support organizations during internal and external audits</p><p>✅Prepare compliance evidence and audit documentation</p><p>✅Conduct control effectiveness assessments</p><p>✅Develop remediation plans and track compliance gaps</p><p>✅Work with technical and business teams to implement security controls</p><p>✅Prepare professional GRC, risk and compliance reports for management</p><p><br></p><p> Preferred Certifications</p><p>Relevant professional certifications are highly desirable, such as:</p><p>ISO/IEC 27001 Lead Auditor / Lead Implementer, CISA, CISM, CISSP, CRISC, CGEIT</p><ul><li>PCI Professional / PCI-related certifications</li></ul>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Mission <br><p><b>JOB PURPOSE:&nbsp;</b></p><br><br><p>The Jr Cybersecurity GRC Engineer supports the Governance, Risk, and Compliance (GRC) function by assisting in the implementation and maintenance of essential security policies and compliance activities. This role bridges the gap between technical operations and regulatory standards, ensuring the organization’s cybersecurity posture remains robust under the guidance of the GRC team.</p><br><br> Profile <br><p><b>RESPONSIBILITIES/DUTIES&nbsp;</b></p><br><br><p><b>Governance, Policy &amp; Compliance</b></p><br><br><p>•Support the development, review, and periodic maintenance of information security policies, standards, and internal procedures.</p><br><br><p>•Facilitate the communication of security policies across departments to ensure workforce alignment and organizational adherence.</p><br><br><p>•Assist in the collection, organization, and preservation of compliance evidence required for both internal and external audits.</p><br><br><p>•Contribute to the tracking of audit findings, helping to coordinate the timely remediation of identified gaps.</p><br><br><p><b>Risk Management &amp; Assessment</b></p><br><br><p>•Participate in the identification, assessment, and formal documentation of information security risks throughout the infrastructure.</p><br><br><p>•Maintain updated risk registers, ensuring all mitigation plans are documented and tracked for stakeholder review.</p><br><br><p>•Monitor the execution of risk treatment actions, providing regular status updates to the GRC Engineer.</p><br><br><p>•Conduct due diligence support for third-party and vendor risk assessments to ensure alignment with security requirements.</p><br><br><p><b>Control Monitoring &amp; Reporting</b></p><br><br><p>•Evaluate the operational effectiveness of security controls to identify potential vulnerabilities or performance gaps.</p><br><br><p>•Prepare periodic reports, dashboards, and executive summaries regarding GRC activities and compliance status.</p><br><br><p>•Document GRC workflows meticulously to ensure high-quality, audit-ready records for all security activities.</p><br><br><p>•Recommend incremental improvements to existing GRC processes, tools, and methodologies to enhance operational efficiency.</p><br><br><p><b>Security Operations Governance &amp; Compliance Support</b></p><br><br><p>•Support alignment of Security operations with security policies, standards, and regulatory requirements.</p><br><br><p>•Assist in maintaining Security procedures and playbooks (e.g., logging, detection, incident response).</p><br><br><p>•Support review of detection use cases and monitoring coverage from a compliance perspective.</p><br><br><p>•Assist in ensuring logging and monitoring controls meet audit requirements.</p><br><br><p><b>Safety Responsibilities:</b></p><br><br><p>•Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</p><br><br><p>•Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</p><br><br><p>•Be mindful that Safety, Security, and Environmental protection are everyone’s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</p><br><br><p><b>ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><br><br><p><b>QUALIFICATIONS:&nbsp;</b></p><br><br><p>•Bachelor’s degree in Information Security, Computer Science, IT, or a related field.</p><br><br><p>•CompTIA Security+, ISC2 Certified in Cybersecurity, ISO 27001 Foundation, or OCEG (GRCP/GRCA) is an advantage.</p><br><br><p><b>KNOWLEDGE:&nbsp;</b></p><br><br><p>•Foundational understanding of cybersecurity standards (e.g., ISO 27001, NIST, IEC 62443, GDPR).</p><br><br><p>•Knowledge of risk management concepts and the information security lifecycle.</p><br><br><p>•Familiarity with IT infrastructure, network security concepts, and common enterprise audit processes.</p><br><br><p>•Advanced proficiency in Microsoft Office 365 (Excel, PowerPoint, Word) and basic experience with GRC/Audit management software.</p><br><br><p><b>EXPERIENCE:&nbsp;</b></p><br><br><p>•0-3 years of progressive experience in IT, Information Security, or cybersecurity-related roles.</p><br><br><p><b>DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><br><br><p>•Possesses a strong aptitude for digging into granular data to identify the underlying causes of security indicators.</p><br><br><p>•Maintains a high level of precision in documentation, ensuring that no regulatory or policy detail is overlooked.</p><br><br><p>•Exhibits a proactive interest in emerging cybersecurity threats and modern regulatory landscapes (e.g., AI-driven security).</p><br><br><p>•Capable of bridging technical and non-technical departments to foster a security-conscious workplace culture.</p><br><br><p>•Security-first mindset with a high sense of integrity, responsibility, and ethical conduct.</p><br><br><p>•Resilient and organized while handling workload pressure, capable of balancing multiple tasks while meeting deadlines.</p><br><br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> Join our Team <br><p><strong>Why Ericsson?</strong></p><br><br><p>Every day, billions of people rely on Ericsson technology to stay connected. Protecting those connections requires strong cybersecurity, effective risk management, and robust governance processes across a global business.</p><br><br><p>This opportunity is designed for emerging talent looking to gain hands-on experience in cybersecurity while developing skills in governance, risk management, compliance, data analytics, automation, and AI. You'll work with experienced security professionals and contribute to initiatives that help strengthen Ericsson's cybersecurity posture across the EMEA region.</p><br><br><br><p><strong>About this opportunity:</strong></p><br><br><p>Join Ericsson's EMEA Enterprise Security team and support cybersecurity governance, risk management, and compliance activities that help protect business operations across a complex multinational environment.</p><br><br><p>Working closely with cybersecurity professionals and business stakeholders, you'll contribute to Information Security Management System (ISMS) activities, cybersecurity risk management, compliance monitoring, reporting, and AI-driven innovation. You'll also explore how automation, analytics, and Generative AI can simplify processes and improve decision-making across the security function.</p><br><br><br><p><strong>What you will do:</strong></p><br><br><ul><li>Support Information Security Management System (ISMS) activities, including security documentation, control tracking, Statements of Applicability (SoA), and compliance reporting</li><li>Assist with cybersecurity risk management activities, including risk identification, assessment, treatment tracking, and reporting</li><li>Support governance and compliance initiatives through the collection, analysis, and presentation of security-related metrics</li><li>Develop dashboards, reports, and visualizations that improve visibility of risks, compliance status, and security performance</li><li>Explore opportunities to apply AI and automation to improve cybersecurity governance and risk management processes</li><li>Design and prototype Generative AI solutions that support productivity, reporting, risk analysis, and compliance activities</li><li>Contribute to continuous improvement initiatives across governance, risk, and compliance processes</li><li>Collaborate with security professionals and business stakeholders across the EMEA region</li></ul><br>Who you are: <br><ul><li>We are looking for individuals with strong potential who are excited to learn, innovate, and make an impact:</li><li>Currently enrolled in University doing a Degree or&nbsp;Masters program</li><li>Degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, Data Analytics, or a related field</li><li>Strong interest in cybersecurity, governance, risk management, compliance, and AI</li><li>Basic understanding of cybersecurity frameworks and standards such as ISO 27001, NIST, CIS Controls, or similar frameworks</li><li>Interest in risk management, compliance monitoring, and security governance processes</li><li>Curious about applying AI, automation, and analytics to solve business challenges</li><li>Strong analytical and problem-solving skills</li><li>Excellent communication and collaboration skills</li><li>Proactive, eager to learn, and comfortable working in a global environment</li><li>Fluent in English, with strong written and verbal communication skills</li></ul><br><p><strong>What You'll Gain:</strong></p><br><br><ul><li>Real cybersecurity experience from day one</li><li>Hands-on exposure to cybersecurity governance, risk management, and compliance activities</li><li>Experience working with security frameworks, controls, and risk management practices</li><li>Opportunities to explore AI, automation, and analytics within cybersecurity</li><li>Learning, mentoring, networking, and professional development opportunities</li><li>Collaboration with security and business teams across countries, functions, and markets</li><li>Practical experience at the intersection of cybersecurity, business, and AI</li></ul><br><p><strong>Program Highlights:</strong></p><br><br><ul><li>&nbsp;12-month paid assignment</li><li>&nbsp;Madrid, Spain</li><li>&nbsp;Designed as an immersive experience, with regular office collaboration helping you learn faster, build stronger connections, and become an active part of the team</li></ul><br><p><strong>Why join Ericsson?</strong>At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.<br>&nbsp;<br><strong>What happens once you apply?</strong>Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer.&nbsp;learn more.</p><br><br><br><p><strong>Primary country and city:</strong> Spain (ES) || Madrid</p><br><br><p><strong>Req ID:</strong>&nbsp;788186 </p><br><br><br><br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>Join the Network Security Experts at Click ITS!</strong></p><br><br><p><strong>Click ITS</strong>, a leading System Integrator located in Egypt, is expanding our elite <strong>Network Security Department</strong>. We partner with industry giants including <strong>Fortinet, Palo Alto Networks, Kaspersky, CrowdStrike, Nozomi Networks, Tenable, and Thales</strong> to deliver comprehensive security solutions across various layers such as NGFW, SD-WAN, EDR, XDR, OT Security, Data Protection, MFA, and SOC.</p><br><br><p>We are currently looking for passionate and driven professionals to join our dynamic team in the following roles:</p><br><br><p><strong>1. Junior Network Security Engineer</strong></p><br><br><p>Are you ready to accelerate your career in cybersecurity? We are looking for a hands-on Junior Network Security Engineer with a strong foundation in network defence and a drive to learn.</p><br><br><p><strong>Experience Required:</strong> 3 Years</p><br><br><p><strong>Key Responsibilities:</strong></p><br><br><ul><li>Implement, configure, and manage security solutions across different layers (NGFW, SD-WAN, EDR/XDR).</li><li>Assist in the deployment and integration of top-tier vendor solutions including Fortinet, Palo Alto, and Kaspersky.</li><li>Monitor network traffic for security events and assist the SOC team in incident response.</li><li>Troubleshoot and resolve network security issues in enterprise environments.</li><li>Maintain and update security documentation and standard operating procedures.</li></ul><p><strong>Qualifications:</strong></p><br><br><ul><li>Bachelor's degree in computer engineering, Information Technology, or a related field.</li><li>Approximately 3 years of practical experience in network security or systems integration.</li><li>Familiarity with NGFW, Endpoint Security, and basic Data Protection concepts.</li><li>Relevant vendor certifications (e.g., NSE 4, PCNSA) are a strong plus.</li><li>Excellent problem-solving skills and a proactive attitude.</li></ul><p><strong>Why Join Click ITS?</strong></p><br><br><p><strong>Work with the Best: Hands-on experience with cutting-edge technologies from top global vendors.</strong></p><br><br><p><strong>Career Growth: Continuous learning opportunities, training, and certification support.</strong></p><br><br><p><strong>Impactful Work: Protect critical infrastructures and enterprise networks against modern threats.</strong></p><br><br><p><strong>Dynamic Culture: Join a collaborative, innovative, and fast-paced team environment in Egypt.</strong></p><br><br> <br><br> </div>