InfoSec Compliance & Assurance Lead (Banking)

About the role

We are seeking an InfoSec Compliance & Assurance Lead to drive the security compliance posture of a leading Egyptian bank undergoing digital transformation. The role will act as the technical arm of the InfoSec function, tracking, evidencing and reporting on remediation against the Central Bank of Egypt (CBE) Cybersecurity Framework, PCI DSS and internal controls.

Key responsibilities

• Maintain a live compliance tracker for all active CBE Cybersecurity Framework control domains (IAM, PAM, GRC, Container Security, etc.).
• Conduct regular technical walk‑throughs with IT and Digital Transformation teams to validate implementation status and close evidence gaps.
• Escalate risks and blockers to the Head of GRC and CISO with quantified risk language for Risk Committee reporting.
• Map remediation actions to OKR key results and monitor delivery against agreed timelines.
• Prepare compliance status reports for senior management and regulatory audiences.
• Own the end‑to‑end PCI DSS engagement cycle, including scoping, gap assessment, remediation tracking, QSA coordination and readiness for Report on Compliance (RoC) or Self‑Assessment Questionnaire (SAQ).
• Coordinate with IT, Operations and Digital teams to ensure Cardholder Data Environment (CDE) controls are implemented, evidenced and maintained.
• Manage the relationship with the appointed Qualified Security Assessor (QSA) as the internal point of contact.

Required profile

• Proven experience in information security compliance within banking or financial services.
• Hands‑on knowledge of the CBE Cybersecurity Framework and PCI DSS requirements.
• Ability to work closely with cross‑functional IT and digital teams and communicate risk findings to senior leadership.

Required skills

• CBE Cybersecurity Framework
• PCI DSS
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Governance, Risk & Compliance (GRC)
• Container Security
• Compliance tracking and reporting
• Qualified Security Assessor (QSA) coordination