Cyber Security Compliance Tech. Lead Job at Vodafone (Giza)

Tech Lead (Cyber Security)

Join Aristocrat as a Tech Lead (Cyber Security) and spearhead our mission to bri...

Location

India , Noida

Salary:

Not provided

Aristocrat Gaming

Expiration Date

Until further notice

Requirements

6+ years in Cybersecurity with at least 5+ years specializing in IAM/PAM
In-depth understanding of Active Directory (On-prem) and Azure AD/Entra ID
Hands-on experience with IGA tools (e.g., SailPoint, Saviynt) and PAM tools (e.g., CyberArk)
Deep understanding of Federation protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM
Strong proficiency in PowerShell or Python for automating IAM tasks
Ability to build "Least Privilege" models and Role-Based Access Control (RBAC) structures
Certifications: CEH, CISSP, CIAM, or vendor-specific certifications (e.g., CyberArk Defender/Sentry, Okta Certified Consultant)
Experience managing machine identities and secrets in DevOps pipelines
Experience consolidating AD forests or migrating from on-prem to cloud identity

Job Responsibility

Architect and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations using tools like Okta, Ping Identity, and Microsoft Entra ID
Build and maintain Joiner, Mover, Leaver lifecycle processes
Automate provisioning and de-provisioning workflows to ensure Day 1 access and immediate revocation upon termination
Manage enterprise PAM solutions such as CyberArk, BeyondTrust, and Thycotic to secure high-value credentials
Maintain the health and hygiene of Active Directory (AD) and Entra ID (Azure AD)
Manage Group Policy Objects (GPO) related to security and implement Conditional Access Policies
Drive the migration of legacy applications to modern authentication standards (SAML, OIDC, OAuth)
Conduct periodic access reviews/recertifications to satisfy compliance audits (SOX, ISO 27001)
Implement and manage Identity Governance & Administration (IGA) platforms like SailPoint, Saviynt, Oracle, and Azure Identity Governance
Monitor IAM logs to detect anomalous behavior and blocking issues with privileges

What we offer

Robust benefits package
Global career opportunities

Fulltime

Cyber Security Assurance Tech Lead

We are looking for a Cyber Security Assurance Tech Lead to join our team and pla...

Location

Egypt , Giza

Salary:

Not provided

Vodafone

Expiration Date

Until further notice

Requirements

Strong knowledge of security frameworks and methodologies such as MITRE ATT&CK, NIST, OWASP, and CIS Controls
Hands-on understanding of penetration testing methodologies for web, mobile, network, API, and cloud environments
Familiarity with hardening and secure configuration practices for servers, databases, operating systems, and applications
Experience in vulnerability assessment, risk analysis, and providing security recommendations aligned with business requirements
Ability to work collaboratively with cross-functional teams to identify, prioritize, and remediate security vulnerabilities
Strong analytical, troubleshooting, and problem-solving skills with the ability to communicate technical findings to both technical and non-technical stakeholders

Job Responsibility

Perform penetration testing activities on web applications, mobile applications, networks, APIs, and cloud environments to identify security vulnerabilities and weaknesses
Support penetration testing activities conducted internally or through third-party vendors, ensuring proper execution and reporting
Conduct vulnerability assessments and security analysis, providing remediation recommendations to improve the overall security posture
Validate secure implementation and acceptance of new technologies, systems, and infrastructure in alignment with Vodafone security policies and standards
Perform regular security assurance activities on existing applications and environments to ensure continuous compliance and protection against emerging threats
Participate in security risk assessments for new projects and initiatives, ensuring security risks are identified and mitigated during early project phases
Collaborate with technical teams and business stakeholders to track and remediate penetration testing findings in a timely manner
Review and validate penetration testing reports, ensuring findings are properly documented with clear remediation guidance
Stay up to date with emerging cyber threats, vulnerabilities, attack techniques, and industry best practices to continuously improve penetration testing and security assurance capabilities

Fulltime

New

Cyber / Tech 2nd LOD Senior Lead Analyst, Senior Vice President

The Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi...

Location

Poland , Warsaw

Salary:

340990.00 - 580610.00 PLN / Year

Citi

Expiration Date

Until further notice

Requirements

Experience in technology and cyber risk assessments, metrics, enterprise technology services, risks, and controls within globally complex, dispersed, and diverse organizations
Advanced knowledge and experience leading control design and operating effectiveness evaluation, testing, and reporting with a track record of influencing effective risk mitigation strategies
Excellent presentation skills as well as the ability to effectively communicate complex topics to a broad audience
Advanced proficiency in creating written executive materials and mastery in verbal presentation to Executive audiences
Outstanding communication and influencing skills, with the ability connect with individuals throughout all levels of the organization and with external partners and vendors
Exceptional relationship management skills, including demonstrable experience managing through conflict and issue resolution with senior stakeholders
Proven ability to work within teams, manage cross-functional projects, influence executive-level strategic decision-making, and effectively translate technology / cyber risk insights to value-add risk mitigation solutions
Subject matter expert in one or more industry standard risk management frameworks (including ISO27001, COBIT, TOGAF and CRI for example), and an in-depth understanding of technology and cyber risk mitigation strategies
Deep knowledge of products within the coverage area (e.g, Markets, Banking), including a technical understanding of current and emerging trends as well as the ability to apply in-depth understanding of the business impacts of technical contributions
In-depth knowledge of technology and cyber risks and controls across various information system architecture and engineering domains including data protection, identity and access management, vulnerability management, network security, endpoint security, logging and monitoring, incident management, and third-party management

Job Responsibility

Manages internal projects on threat issues that support a variety of participants and stakeholders measuring the effectiveness and comprehensiveness of Citi’s first line defenses
Establishes and oversees the application of compliance and technology and cyber policies and procedures, technology and tools, and governance processes to provide credible challenge for minimizing losses from technology and cyber risks
Independently assesses technology and cyber risks and drive actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices
Leads independent assurance activities to assess areas of concern including substantive and controls testing
Monitors, evaluates, and challenges Key Risks and associated Key Risk Indicators triggers and thresholds
Identifies potential risks associated with program/project delivery on a technical and detailed level
Leads various second line of defense technology and cyber assessments including risk assessments, control assessments, maturity assessments etc
Assesses technology and cyber risks associated with new initiatives and programs being proposed for implementation
Challenges the design, adequacy and strength of the control environment associated to technology and cyber and recommends actions to ensure the operational risk profile is in line with the technology and cyber risk appetite
Executes ad-hoc activities for the TCCORO organization, including but not limited to: researching and producing materials for presentations of deep dives into selected topics, coordinating deliverables related to audits and examinations, and maintaining associated data for executive reporting

What we offer

Employer paid Defined Contribution Pension Plan contribution of 6% of employee’s pensionable earnings (PPE Program)
Employer paid Private Medical Care Package for employees and Private Medical Care Packages for certain family members available at preferential rates
Employer paid Life Insurance Program for employees and Life Insurance for certain family members available at preferential rates
Employee Assistance Program financed by Employer
Paid Parental Leave Program (maternity and paternity leave
statutory and 2 weeks additional paid paternity leave)
Sport Card for employees subsidised via Social Benefits Fund and Sport Cards for certain family members available at preferential rates
Additional benefits from Company’s Social Benefit Fund, in particular: Holidays Allowance, support for sport and cultural activities, team building events
Additional day off for volunteering
Cafeteria/ flex benefit

Fulltime

Senior Tech & Security Regulatory Officer

Adyen is looking for a Senior Tech & Security Regulatory Officer to join the tec...

Location

India , Bengaluru

Salary:

Not provided

Adyen

Expiration Date

Until further notice

Requirements

A strong understanding of APAC technical and security regulations and laws
Experience working in a regulatory role, preferably within a financial services and/or technical environment
Affinity and hands-on experience with engineering and the ability to understand complex financial products and services
Strong analytical and research skills
Excellent written and verbal communication skills
The ability to work independently and manage multiple projects simultaneously that may span across teams and time zones
A proactive and collaborative approach to problem-solving
A minimum of 8-10 years of relevant working experience as a technology auditor/advisor or within a cyber security role for a fintech/bank/financial institution
Experience leading, growing, mentoring Tech/Security regulatory teams strongly preferred
Experience within the payments industry is not required, but experience within a technology environment is a huge plus

Job Responsibility

Representing the company in technology and cybersecurity related discussions with APAC regulators and manage requests from regulators and auditors to ensure successful audit cycles/certifications (e.g. RBI audits, MAS audits, BNM audits, system audits (SAR), ISO Audits, PCI-DSS, SOC 1 & 2 audits, banking partner audits, network audits, statutory auditors)
Ensuring processes (such as network access management, admin account management, key management, security detection and monitoring, incident management, business continuity management) comply with regulatory requirements and technology risks are mitigated
Representing the company in discussions with regulators and other external stakeholders like customers for cybersecurity
Coordinating and evaluating business continuity testing/drills and incident management related tabletops/trainings with board members and incident response teams for India/APAC
Adopting tech and security procedures/directives as required
Conducting research and providing guidance on regulatory requirements to global teams, executives, board members and providing guidance to the business on how to comply with them
Implementing new security/tech requirements if and when we apply for additional licenses in APAC
Preparing technology and security monitoring reports for external and internal stakeholders (and IT/Executive committees)

Head of Governance, Risk and Compliance - CISO function - BPL

The Head of GRC leads the pillar responsible for ensuring the organisation under...

Location

United Kingdom , London

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

CISM, CRISC, or CISSP certification
Experience with DORA (Digital Operational Resilience Act) compliance requirements and implementation
ISO 27001 Lead Auditor or Lead Implementer certification
PCI QSA or Internal Security Assessor (ISA) qualification
Previous experience in FinTech, Digital Banking, Payment Acquiring organisation
Experience with Visa GACS and Mastercard SDP acquirer compliance programmes
Significant experience of progressive experience in information security governance, risk, and compliance, with at least 5 years leading a GRC team in a regulated environment
Strong understanding of UK GDPR and the role of security controls in meeting data protection obligations, including breach notification requirements and data protection impact assessments
Experience designing and operating security control frameworks mapped to multiple regulatory requirements simultaneously (e.g., a single framework serving PCI DSS, FCA, and GDPR)
Understanding of cloud-native architectures and their implications for compliance and risk management

Job Responsibility

Own the security policy framework, ensuring policies are current, proportionate, and aligned to PCI DSS, FCA expectations, UK GDPR, and DORA requirements
Maintain and operate the security risk register, ensuring risks are assessed consistently using a defined methodology, owned explicitly, and reported accurately to the CISO and Executive Leadership Team (ETL)
Manage the relationship with external auditors, the Qualified Security Assessor (QSA), and 2nd/3rd Line of Defence (LoD) on all security and technology risk matters
Own the third-party security assurance process, ensuring all vendors, partners, and card scheme integrations are risk-assessed with a tiered approach proportionate to data access and criticality
Chair the monthly Cyber and Tech Risk and Controls Forum, presenting risk posture, compliance status, and material findings to the CISO, CIO and ELT
Design and maintain the control framework, mapping controls to PCI DSS, FCA, UK GDPR, and DORA requirements, and ensuring control effectiveness is tested on a continuous cycle
Produce KRI dashboards and risk reporting for CISO, CIO, and ELT consumption, ensuring risk is communicated in business terms
Lead regulatory and audit engagement on security matters, coordinating regulatory review and audit interactions and proactively managing stakeholder relationships
Own the risk assessment calendar, ensuring both cyclical and event-driven assessments are executed on schedule with appropriate rigour
Manage the risk acceptance process, ensuring risk acceptance decisions are documented, time-bound, approved at the appropriate authority level, and reviewed before expiry

What we offer

Competitive holiday allowance
Life assurance
Private medical care
Pension contribution

Fulltime

Principal Engineer (Java)

The Principal Engineer is a senior technical leader focused on tech risk remedia...

Location

India , Chennai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of relevant experience in an Engineering role with commensurate experience in people management
Experience working in Financial Services or a large complex and/or global environment
Project Management experience
Consistently demonstrates clear and concise written and verbal communication
Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
Demonstrated analytic/diagnostic skills
Ability to work in a matrix environment and partner with virtual teams
Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
Proven track record of operational process change and improvement

Job Responsibility

Ensure the goals of functional area are delivered to appropriate Operations & Technology (O&T) organizations
Oversee O&T spending to ensure the firm's finances are budgeted and spent according to the Chief Technology officer’s (CTO) technology strategies
Manage overall execution of IT strategy and roadmap for the technology area
Lead operational readiness and conformance to global operational standards for ongoing operation and support
Utilize an in-depth understanding of how engineering integrates within technology and commercial awareness
Responsible for training and coaching team members, performance management activities, monitoring quantity and quality of work, and addressing development needs for assigned personnel
Make evaluative judgment based on analyzing information in complicated or unique situations
utilizing multiple sources of information
Impact engineering through overseeing planning, finances / budget, end results and policy setting
Negotiate with senior leaders across functions and with external parties, as required

Fulltime

Technology Risk Senior Manager- Enterprise Services Risk

The Enterprise Services Risk organization is expanding with a focus on attractin...

Location

United States , Richmond, Virginia; Chicago, Illinois; McLean, Virginia; Plano, Texas; New York, New York

Salary:

182500.00 - 249900.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

Bachelor's Degree or military experience
At least 5 years of experience in Risk Management, Process Management, Project Management, or a combination of these
At least 7 years of experience in an information technology or technology risk management
At least 7 years of experience supporting, partnering and interacting with internal and external stakeholders
At least 3 years of experience in the Financial Services industry

Job Responsibility

Serve as a Technology Risk Senior Manager supporting the CORE organization to help the team make informed decisions around integration
Lead a portfolio of integration risk activities, with the intent to ensure both organizations are meeting the same policies and standards in a consistent manner
Present to Risk and Tech leadership on the status of integration activities and any emerging risks
Partner with second line of defense as they review and challenge progress and risk approach related to integration activities
Build successful relationships with Tech and other team members to understand the impact of technology risk on critical business processes
Influence leaders within Tech, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed
Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness for the combined organization
Design and support internal risk and control governance processes
Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One’s strategic risk direction
Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas

What we offer

performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being

Fulltime

Engineering Group Manager

The Engineering Group Manager is a senior management level position responsible ...

Location

India , Pune; Chennai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of relevant experience in an Engineering role with commensurate experience in people management
Experience working in Financial Services or a large complex and/or global environment
Project Management experience
Consistently demonstrates clear and concise written and verbal communication
Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
Demonstrated analytic/diagnostic skills
Ability to work in a matrix environment and partner with virtual teams
Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
Proven track record of operational process change and improvement

Job Responsibility

Ensure the goals of functional area are delivered to appropriate Operations & Technology (O&T) organizations
Oversee O&T spending to ensure the firm's finances are budgeted and spent according to the Chief Technology officer’s (CTO) technology strategies
Manage overall execution of IT strategy and roadmap for the technology area
Lead operational readiness and conformance to global operational standards for ongoing operation and support
Utilize an in-depth understanding of how engineering integrates within technology and commercial awareness
Responsible for training and coaching team members, performance management activities, monitoring quantity and quality of work, and addressing development needs for assigned personnel
Make evaluative judgment based on analyzing information in complicated or unique situations
utilizing multiple sources of information
Impact engineering through overseeing planning, finances / budget, end results and policy setting
Negotiate with senior leaders across functions and with external parties, as required

Fulltime

Select Country

Cyber Security Compliance Tech. Lead

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?