Governance Risk

2 days ago


مصر, Egypt Pillars Consultancy Full time

Department\ GRC\Information Security
Division Risk
Reports To CISO
Location Head Office
No. of Employees per job 2
**Job Purpose**
Development of cybersecurity policies, and governance of security structures Cyber Security and Operations, Cyber Security Risk Management, and Compliance With the organization’s risk management and cyber security requirements and requirements relevant legal.
Duties & Responsibilities
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
Plan and conduct security authorization reviews and assurance case development for new and existing installation of systems and networks to confirm that risk is within acceptable limits.
Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).
Participate in Risk Governance process to provide security risks, mitigations, and input on other technical risk.
Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
Assure successful implementation and functionality of security requirements and appropriate IT policies and procedures that are consistent with the organization’s mission and goals.
Ensure that security design and cybersecurity development activities are properly documented (providing a functional description of security implementation) and updated as necessary.
Support necessary compliance activities (e.g., ensure that system security configuration guidelines are followed, compliance monitoring occurs).
Ensure that all acquisitions, procurements, and outsourcing efforts address information security requirements consistent with organization goals.
Conduct interactive training exercises to create an effective learning environment
Develop new or enhance existing awareness and training materials that are appropriate for intended audiences.
Internal Contacts
ABG, Information Technology sector, Risk, compliance, and end user
External Contacts
Central Bank of Egypt (CBE)
Authority
As per Access Matrix

**Requirement**:

- Qualifications
Holds Bachelor’s degree in engineering, Computer Science, Cyber Security, or any related field
Preferably have one of the following certifications: CCNA Security, CompTIA Security +, CISA, ISA27001
Language Arabic, English

**Experience**:

- At least two years of experience working in the same field as well as IT experience
- Needed Skills & Knowledge
- Ability to: Identify systemic security issues based on the analysis of vulnerability and configuration data.
- Answer questions in a clear and concise manner.
- Ask clarifying questions.
- Communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
- Design valid and reliable assessments.
- Evaluate information for reliability, validity, and relevance.
- Function in a collaborative environment, seeking continuous consultation with others
- Interpret and understand complex and rapidly evolving concepts.
- Monitor advancements in information privacy technologies to ensure organizational adaptation and compliance.
- Relate strategy, business, and technology in the context of organizational dynamics.
- Knowledge of:
Computer networking concepts and protocols, and network security methodologies.
Risk management processes (e.g., methods for assessing and mitigating risk).
Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
Cybersecurity and privacy principles.
Cyber threats and vulnerabilities.
Specific operational impacts of cybersecurity lapses.
Authentication, authorization, and access control methods.
Applicable business processes and operations of bank.
Cyber defense and vulnerability assessment tools and their capabilities.
Cryptography and cryptographic key management concepts
Data backup and recovery.
Database systems.
Business continuity and disaster recovery continuity of operations plans.
Organization’s enterprise information security architecture.
Organization’s Local and Wide Area Network connections.
Security Assessment and Authorization process.
Cybersecurity and privacy principles used to manage risks related to the use, processing, storage, and transmission of information or data.
Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Risk Management Framework (RMF) requirements.
Current industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection, and remediation tools and procedures
Network access, identity, and access management (e.g., PKI, Oauth,


  • IT Grc Specialist

    7 months ago


    مصر, Egypt CEQUENS Full time

    **Key Roles and Responsibilities**: **1. Governance**: - Develop and maintain IT governance policies, procedures, and standards in alignment with industry best practices and regulatory requirements. - Implement governance frameworks such as COBIT, ISO 27001, NIST, SOC 2, PCI etc., to ensure effective IT governance across the organization. - Coordinate with...


  • مصر, Egypt Majid Al Futtaim Full time

    **BUSINESS INTRODUCTION** Majid Al Futtaim Holding is the leading shopping mall, retail, communities, entertainment developer and operator in the Middle East, North Africa, and Central Asia regions. With over 48,000 people, revenues of over US$ 11 Billion, and operations in 18 countries. Some of the iconic brands we carry include Mall of the Emirates,...


  • مصر, Egypt EGBank Full time

    **MAJOR RESPONSIBILITIES AND ACOUNTABILITIES** - Review and evaluate the design of security systems. - Review and evaluate security policies, controls and incident response planning in cooperation with stakeholders throughout the enterprise. - Review identity and access policies in cooperation with stakeholders throughout the enterprise. - Review...

  • Risk Advisory Manager

    9 months ago


    مصر, Egypt Boubyan Consulting Full time

    **Role** A Risk Advisory Manager is responsible for overseeing a team of risk consultants and managing risk advisory projects for clients. He should have practical experience in leading Risk Advisory projects such as Internal Audit Services, Risk Management Services, Corporate Governance Services, Compliance Services, Developing Policies and Procedures...


  • مصر, Egypt One Finance Full time

    Job description 1. Identify the risks that exist and affect one-finance’s business objectives. 2. Coordinate with the process owner to set the mitigation actions for these risks to reduce the likelihood and impact 3. Monitor the action plan and review points to ensure the effectiveness of mitigation action and that risk will be mitigated to the target...


  • مصر, Egypt PepsiCo Full time

    Overview: The Risk and Performance Reporting Specialist is a newly created role within Information Security reporting to the Director of Information Security Risk and Performance Management. The position is responsible for leading the Risk and Performance Management initiatives, enhancement projects, and will serve as a team lead within the RPMR group. The...


  • مصر, Egypt SSC Egypt Full time

    1. Conduct the annual review and update of the area’s processes, procedures and policies with the adherence to the developed SLAs. This includes mainly the review of the Information Governance Policy, the Security Governance Policy, the Data Classification Policy and the Information Access Management & Handling Procedures. 2. Design and Develop the Data...

  • Portfolio Risk Manager

    7 months ago


    مصر, Egypt Abgad Full time

    This role exists to maximise Abgad's risk-adjusted rate of return by maintaining credit risk exposure within acceptable and compliant parameters. Developing and implementing a risk management framework with appropriate tools for the measurement, reporting and control with a healthy risk-appetite framework at the top of mind is your key success indicator in...


  • مصر, Egypt Inspired Full time

    Inspired Education is the leading global group of premium schools, with a portfolio of over 100 premium private schools spanning six continents which utilise proven educational practices from every corner of the globe, ensuring over 80,000 students receive a world-class learning experience from Kindergarten to Year 13. In addition, we are delighted to be...


  • مصر, Egypt HSBC Full time

    -Job description **Why join us?** Global Enterprise Risk Management (ERM) is a new function, bringing together Operational & Resilience Risk (ORR) and parts of Risk Strategy & Macroeconomic Risk. It is a combined Risk Stewardship and Oversight sub-function within Global Risk and Compliance which aims at supporting the integration of our Group Framework and...


  • مصر, Egypt HSBC Full time

    **Description** We are currently seeking an experienced professional to join our team in the role of **AVP Business Regulatory Risk (BRR) and Chief Control Office (CCO) - Wholesale MENAT** **Principal responsibilities** - Maintaining robust oversight of Non-financial risks across Wholesale in MENAT region, including demonstrating compliance with all...


  • مصر, Egypt InstaShop Full time

    InstaShop, headquartered in Dubai, is the leading online marketplace for supermarkets, pharmacies, pet shops & other businesses in the Middle East. With a young & motivated team, InstaShop is the right company for individuals passionate about adding value within a fast-growing technology company. As the Risk & Compliance Analyst at InstaShop, you will play...


  • مصر, Egypt HSBC Full time

    -Job description **Why join us?** The Wholesale NFR construct has been brought together in line with HSBC investor commitments in February 2020, and as a result this is an opportunity to shape a key component of HSBC’s future state. The Wholesale Banking (WSB) BRR & CCO operates within the Wholesale Non-Financial Risk Function in MENAT. Wholesale...


  • مصر, Egypt HSBC Full time

    Role Purpose: The Cybersecurity TPSR Senior Risk Analyst job is responsible for operating as part of a global/local team within the Cybersecurity organisation, to analyse and execute activities around Cybersecurity process, controls, standards and regulatory requirements. The role will carry out some or all of the following activities: - Ensure adherence...

  • Cyber Risk

    7 months ago


    مصر, Egypt Vodafone Full time

    **ROLE PURPOSE**: - Manage all related cyber security compliance programs - Manage cyber security related risk - Responsible for the implementation and effectiveness of Cyber Prevent Controls. - Identify risk triggers, and corresponding risk responses strategy. - Governance of all inherited cyber security programs and work streams (i.e.: SecuRED - Group...


  • مصر, Egypt Envision Employment Solutions Full time

    **Ready and hungry for a new adventure? You are definitely in the right place! We at **Envision Employment Solutions** are always on the look for top talents around the globe and matching them with our partners' hiring needs, to help them build and scale! - Our partners offer awesome work environment, competitive salaries, full benefits, and many others...


  • مصر, Egypt Envision Employment Solutions Full time

    Envision Employment Solutions is currently looking to hire a Head of Business Engagement & Governance for one of our partners, a multinational financial services company. **Summary**: The Head of Business Engagement & Governance is a senior leadership IT professional, who has a track record and broad experience in various IT areas of expertise and business...


  • مصر, Egypt Save the Children Full time

    **Director of Staff Safety Access and Government Liaison - Egypt Country Office** **TEAM/PROGRAMME: Director of Staff Safety Access and Liaison** **LOCATION**:Cairo**GRADE**: National Executive**POST TYPE: FTA** **contract duration: 12 Months **Child Safeguarding**: Level 3 - the responsibilities of the post may require the post holder to have regular...

  • Manager Grc

    1 week ago


    مصر, Egypt Talabat Full time

    When you think of food delivery in the MENA region, we’d be pretty surprised if talabat didn’t pop into your mind first! Since delivering our first order in Kuwait in 2004, we’ve grown quite a lot over the past 17 years. Today, we deliver hundreds of millions of food orders, grocery items and other products per year, to our customers in nine countries...


  • مصر, Egypt PepsiCo Full time

    **Auto req ID**: 285175BR **Role**: Managing government affairs and other government operational-related licenses, facing our PCE and CFI plants and DC operations in Upper Egypt **Accountabilities**: - Assist in stakeholder management - Initiating contact, regular communication, organizing meetings, drafting letters to government stakeholders - Effectively...