Manager (Governance Risk and Compliance)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Build and lead the enterprise cyber security governance program by defining policies, standards, and risk frameworks that align operations with legal and regulatory requirements. Direct cyber risk management and remediation, govern the cyber risk register, and run compliance programs for PCI DSS, ISO/IEC 27001, and SOC 2. Manage audit and certification cycles, define KRIs and security metrics for executives and the board, and oversee third-party vendor cyber risk and security awareness training.

Location: Cairo

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Manager level

Key Responsibilities

•Establish and maintain the cyber security governance framework, including policies and standards, to ensure alignment with legal and regulatory requirements.
•Direct enterprise cyber risk management to identify, analyze, and monitor threats; govern the cyber risk register and remediation plans.
•Lead formal compliance programs for PCI DSS, ISO/IEC 27001, and SOC 2, including audit readiness and internal/external audit cycles.
•Develop Key Risk Indicators (KRIs) and security metrics to provide executive leadership and the board with visibility into the organization’s risk posture.
•Oversee third-party/vendor cyber risk management, administer policy exceptions and risk acceptance processes, and standardize security awareness and compliance training.

Key Requirements

•+7 years of experience in Governance, Risk & Compliance, with a minimum of 5 years managing SOC or security operations teams.
•Minimum 3–4 years of management experience.
•Strong knowledge of fintech and payment security requirements.
•Deep expertise in security frameworks such as ISO 27001/27002, NIST CSF, and CIS Controls.
•Hands-on experience implementing and maintaining SOC 2 controls and audit readiness, including PCI DSS/cardholder data protection.

Experience:FintechPayment securityGovernance risk complianceSOCSecurity operations

Education:Bachelor's in Cyber Security, Computer Science, Information Technology or related field

Skills:LeadershipTeam managementStakeholder engagementCross-functional collaborationDocumentation

Certifications:CISSPCISMCRISCCISAPCI ISAPCI QSAISO 27001 Lead ImplementerISO 27001 Lead Auditor

Tech Stack:ISO 27001ISO 27002NIST CSFCIS ControlsPCI DSSSOC 2AWSAzureGCPGRC toolsIAMVulnerability managementSecurity monitoring

Company Brief

Raya Holding

Website

Loading job details...

Preparing the role view and application actions.

Raya Holding

1 month ago

Manager (Governance Risk and Compliance)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Cairo

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Manager level

Key Responsibilities

•Establish and maintain the cyber security governance framework, including policies and standards, to ensure alignment with legal and regulatory requirements.
•Direct enterprise cyber risk management to identify, analyze, and monitor threats; govern the cyber risk register and remediation plans.
•Lead formal compliance programs for PCI DSS, ISO/IEC 27001, and SOC 2, including audit readiness and internal/external audit cycles.
•Develop Key Risk Indicators (KRIs) and security metrics to provide executive leadership and the board with visibility into the organization’s risk posture.
•Oversee third-party/vendor cyber risk management, administer policy exceptions and risk acceptance processes, and standardize security awareness and compliance training.

Key Requirements

•+7 years of experience in Governance, Risk & Compliance, with a minimum of 5 years managing SOC or security operations teams.
•Minimum 3–4 years of management experience.
•Strong knowledge of fintech and payment security requirements.
•Deep expertise in security frameworks such as ISO 27001/27002, NIST CSF, and CIS Controls.
•Hands-on experience implementing and maintaining SOC 2 controls and audit readiness, including PCI DSS/cardholder data protection.

Experience:FintechPayment securityGovernance risk complianceSOCSecurity operations

Education:Bachelor's in Cyber Security, Computer Science, Information Technology or related field

Skills:LeadershipTeam managementStakeholder engagementCross-functional collaborationDocumentation

Certifications:CISSPCISMCRISCCISAPCI ISAPCI QSAISO 27001 Lead ImplementerISO 27001 Lead Auditor

Tech Stack:ISO 27001ISO 27002NIST CSFCIS ControlsPCI DSSSOC 2AWSAzureGCPGRC toolsIAMVulnerability managementSecurity monitoring

Company Brief

Raya Holding

Website