Information Technology Risk Manager

Who we are

-onebank was established in 2020 as the company responsible for launching the 1st digital native bank in Egypt. The digital bank aims to create innovative solutions tailored to serve the needs of the banking customers in Egypt.

-Our main goal is to create a positive customer experience through the differentiated journey that our customers live while using the digital bank.

-Our Drive: We use our drive and commitment to energies, engage and inspire others, upholding the highest standards of work ethic, honesty and morality.

JOB PURPOSE

• Identify, assess, and mitigate IT-related risks impacting Bank operations, security, and compliance.

• Ensure potential threats to the Bank's technology infrastructure are proactively managed.

• Safeguard IT systems to protect financial assets, customer trust, and regulatory compliance.

• Contribute to Bank resilience, long-term growth, and operational integrity.

MINIMUM QUALIFICATIONS/EDUCATION/EXPERIENCE

• Bachelor's degree in computer engineering or other field with related Professional experience.
• 5+ years of experience in Information security or IT audit with experience in cybersecurity.
• Knowledge of applicable Standards, Frameworks related to information security and cybersecurity, laws and regulations.
• Experience auditing around security and privacy.

JOB DUTIES AND RESPONSIBILITIES

• Execute assigned cybersecurity audit engagements in accordance with the approved audit plan, Internal Audit methodology, IIA Standards, and applicable laws, regulations, and internal policies, ensuring high-quality and timely completion of audit assignments.
• Assess the design and operating effectiveness of cybersecurity controls across the Bank's infrastructure, applications, cloud environments, databases, and information assets to provide independent assurance over the cybersecurity control environment.
• Evaluate compliance with the Bank's cybersecurity policies, standards, regulatory requirements, and industry best practices, and identify control gaps, vulnerabilities, and areas for improvement.
• Identify cybersecurity risks and control weaknesses, assess their business impact, and develop practical, risk-based recommendations to strengthen the Bank's cybersecurity posture.
• Follow up with auditee to get an action plan and review with the senior manager to ensure its adequacy
• Participate in cybersecurity-related investigations, advisory engagements, and special reviews as assigned by the Cybersecurity Audit Senior Manager.
• Maintain up-to-date knowledge of industry trends related to Technologies, IT security, risk management, auditing, compliance, etc. And participate in internal bank staff awareness.