Sr. Specialist, Information Security (Risk)

About the role

The Senior Specialist in Information Security (Risk) will evaluate security requirements, assess the posture of existing EBC systems and new projects, and guide improvements based on risk assessments, threat modeling, and technical testing.

Key responsibilities

• Review security requirements and assess current and future systems to identify gaps.
• Participate in the design and initial implementation of technical controls.
• Manage risk‑management reviews, monitoring, and reporting to align with EBC risk appetite.
• Audit systems and technical operations against standards such as PCI DSS, PCI PIN, 3DS, TSP, ISO 27001, and the Central Bank of Egypt framework.
• Analyze new application architectures and provide security sign‑off before deployment.
• Assess cloud platform controls and conduct third‑party risk management.
• Identify vulnerabilities in hardware and software and recommend remediation.
• Review contracts from an information‑security perspective and handle internal or external audit requests.
• Support compliance activities and produce security reports for management.

Required profile

• Bachelor’s degree in Engineering, Computer Science, Information Security or a related field.
• At least 4 years of experience in information security, cybersecurity, or risk management.
• Proven experience designing and implementing security controls and frameworks.
• Ability to conduct risk assessments, threat modeling, and provide mitigation recommendations.
• Experience supporting secure software development lifecycle (SSDLC) and security‑by‑design initiatives.
• Strong knowledge of regulatory and industry standards.

Required skills

• PCI DSS
• PCI PIN Security
• 3DS
• TSP
• ISO 27001
• Risk assessment
• Threat modeling
• Technical testing
• Cloud security controls
• Third‑party risk management
• Secure Software Development Lifecycle (SSDLC)