Sr. Specialist, Information Security (Risk)

<ul>
<li>Reviews security requirements and assesses the security posture of current EBC systems and new projects to identify gaps or improvements based on risk assessments, threat modeling, and technical testing.</li>
<li>Participates in design and initial implementation of new technical scrutiny controls.</li>
<li>Handles risk management review, monitoring and reporting till it reaches to EBC risk appetite.</li>
<li>Reviews and examines systems compliance against present security standards and the PCI DSS, PCI PIN Security, 3DS, TSP, ISO27001, etc.</li>
<li>Audits different systems and all technical department operations against security standards and internal policies.</li>
<li>Analyzes new application architecture against the security standards and best practice and provide security sign-off before live deployment.</li>
<li>Asses the controls of different cloud platform used.</li>
<li>Perform third party risk management activities according to EBC process.</li>
<li>Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.</li>
<li>Inspects for vulnerabilities and risks in hardware and software.</li>
<li>Finds out the best way to secure the IT infrastructure of an organization.</li>
<li>Review contracts from Information Security perspective.</li>
<li>Handles audit requests whether internal or external.</li>
<li>Carries out other tasks related to compliance activities as requested by management.</li>
</ul><h2>Requirements</h2><ul>
<li>Bachelor’s Degree in Engineering, Computer Science, Information Security, or a related field.</li>
<li>4 years of experience in Information Security, Cybersecurity, Risk Management, or related domains.</li>
<li>Experience in information security design and implementation best practices.</li>
<li>Participate in the design, implementation, and continuous improvement of information security controls and frameworks.</li>
<li>Conduct security risk assessments and provide recommendations for risk mitigation.</li>
<li>Support secure software development lifecycle (SSDLC) initiatives and security-by-design practices.</li>
<li>Ensure compliance with cybersecurity standards, regulatory requirements, and industry best practices.</li>
<li>Review and assess security controls against frameworks such as PCI DSS, PCI PIN Security, PCI 3DS, PCI TSP, ISO 27001, and the Central Bank of Egypt (CBE) Cybersecurity Framework.</li>
<li>Collaborate with technical operations teams and business support teams to identify and resolve security risks.</li>
<li>Coordinate with external vendors, banks, and third-party stakeholders on security-related matters.</li>
<li>Prepare security reports, documentation, and presentations for management and audit purposes.</li>
<li>Support security awareness, governance, and compliance activities across the organization.</li>
</ul>