Chief Information Security Officer

Role Description This is a full-time, hybrid Chief Information Security Officer (CISO) role based in Cairo, Egypt, with flexibility for partial work from home. The CISO will define and lead CYBER سايبر’s information security strategy, policies, and frameworks, ensuring alignment with business objectives and regulatory requirements. Daily responsibilities include overseeing security operations, monitoring threats, managing incident response, and coordinating vulnerability assessments and penetration testing.

The role involves partnering with executive leadership and department heads to assess risk, prioritize security initiatives, and support secure digital transformation. The CISO will guide security architecture for applications and infrastructure, manage security awareness programs, and lead the development and testing of business continuity and disaster recovery plans. The position includes managing security vendors and tools, preparing regular risk and compliance reports, and leading, mentoring, and growing the security team.

Qualifications
• Strong expertise in Information Security Management and Information Security, with a track record of building and maintaining enterprise-wide security programs.
• Deep knowledge of Cybersecurity practices, including threat detection, incident response, security monitoring, and risk assessment.
• Hands-on experience with Application Security, including secure SDLC, code review practices, and collaboration with development teams to embed security by design.
• Proven experience in Business Continuity planning, disaster recovery, and resilience strategies to ensure minimal disruption to critical operations.
• Familiarity with relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS Controls) and regulatory or industry compliance requirements.
• Demonstrated leadership experience managing cross-functional security initiatives and guiding technical and non-technical stakeholders.
• Excellent communication, presentation, and stakeholder management skills, with the ability to translate complex security topics into clear business language.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; advanced degree or recognized security certifications (e.g., CISSP, CISM, CISA, CCSP) are preferred.
• Experience in hybrid or cloud environments (e.g., AWS, Azure, GCP) and modern security technologies such as SIEM, EDR, IAM, and DLP is highly beneficial.
• Proven ability to operate in a fast-paced environment, make informed risk-based decisions, and uphold high ethical and professional standards.