Information Security Manager – Egypt

About the role

The Information Security Manager for PayTabs Egypt will lead the development, implementation and continuous improvement of the company’s information security and cybersecurity posture. Reporting locally and to the Group Information Security function, the role ensures compliance with Central Bank of Egypt (CBE) regulations and aligns local controls with global standards.

Key responsibilities

• Own and maintain compliance with CBE cybersecurity regulations, the Central Bank and Banking System Law, and the Egyptian Personal Data Protection Law.
• Prepare and submit regulatory notifications, incident reports and periodic compliance reports to the CBE.
• Coordinate CBE inspections, external audits and regulatory examinations, managing evidence collection and remediation.
• Localize and implement Group security policies, procedures and standards, maintaining version‑controlled documentation.
• Identify, assess and track information security risks, maintain a local risk register and feed data into the Group ISO 31000‑aligned risk process.
• Oversee technical controls such as identity and access management, vulnerability management, logging and monitoring, network and endpoint security.
• Manage vulnerability scanning, penetration testing and remediation for Egyptian systems and support PCI DSS scope maintenance.
• Conduct third‑party and supply‑chain security assessments for local vendors.

Required profile

• Proven experience in information security management within the payments or financial services sector.
• Deep knowledge of Egyptian cybersecurity regulations, CBE requirements and the Personal Data Protection Law.
• Experience aligning local security controls with ISO 27001, PCI DSS and Group‑wide policies.
• Strong track record of handling regulatory reporting, inspections and audit remediation.
• Excellent communication skills to interact with regulators, auditors and internal stakeholders.

Required skills

• Identity and Access Management (IAM)
• Vulnerability Management and Scanning
• Security Information and Event Management (SIEM) / Logging and Monitoring
• Network and Endpoint Security
• PCI DSS compliance
• ISO 27001 implementation
• ISO 31000 risk management processes
• Third‑party security assessments and penetration testing