Data Entry Question and Answer

~~$150~~ $49

Buy Now

Remote Question and Answer

~~$150~~ $49

Buy Now

Virtual Assistant Question and Answer

~~$150~~ $49

Buy Now

Content Moderator Question and Answer

~~$150~~ $49

Buy Now

Customer Service Question and Answer

~~$150~~ $49

Buy Now

Video Game Tester Question and Answer

~~$150~~ $49

Buy Now

Senior Manager Cyber Org Alignment & Compliance.ISG - Information Security Program

July 4, 2026

Other Jobs To Apply

No other job posts for this day.

Job Purpose The Information Security Cyber Organization Alignment role is focused on the strategic alignment of information security practices with the bank’s overall risk management strategy, compliance requirements, and governance frameworks. The role focuses on driving Information Security Governance, Risk, and Compliance (GRC) initiatives to strengthen the bank’s security posture while ensuring alignment with regulatory and business objectives. through effective processes i.e., risk tracking, compliance monitoring, RCSA, evaluating exceptions, and ensuring accurate reporting. The role ensures the right level of governance is in place and drives continuous improvement in risk management processes. The role leverages automation to streamline processes and enhance risk visibility across Information Security Group through managing GRC solutions Key Result Areas <figure class="table"><table border="1" cellspacing="0" cellpadding="0" width="751" style="border-collapse: collapse; border-width: medium; border-style: none; border-color: currentcolor; border-image: initial;"><tbody><tr style="height: 15pt;"><td width="716" valign="top" style="border: 1pt solid windowtext; height: 15pt; padding: 0in 5.4pt; width: 537.15pt;">Governance, Risk, Compliance:<ul style="list-style-type: disc;"><li>Ensure compliance with policies, regulatory requirements, and industry standards.</li><li>Identify, assess, and manage information security risks.</li><li>Ensure adherence to internal and external compliance requirements.</li></ul>Policy Exception Management:<ul style="list-style-type: disc;"><li>Develop and maintain a comprehensive process for managing policy exceptions, including documentation, expiration date and approval workflows.</li><li>Ensure all policy exceptions are properly documented, reviewed, and approved in accordance with organizational standards.</li><li>Perform risk assessments for proposed policy exceptions to evaluate their potential impact on compliance and security. </li><li>Work with stakeholders to communicate policy exception process, develop compensating controls for policy exceptions, and ensure timely closure.</li><li>Regularly review and monitor granted exceptions to ensure compliance with the terms and conditions.</li><li>Conduct periodic audits to assess compliance with approved exceptions and identify deviations for remediation. </li></ul>Risk Control Self Assessments <ul style="list-style-type: disc;"><li>Coordinate and ensure regular risk control self-assessments across various business units to identify and evaluate potential risks.</li><li>Compile and analyze assessment results and prepare detailed reports with actionable insights and recommendations.</li><li>Perform follow-ups to verify the effectiveness of implemented controls and risk mitigation measures.</li></ul> Offshoring Reporting<ul style="list-style-type: disc;"><li>Maintain accurate and timely reporting of offshoring activities</li><li>Ensure alignment with regulatory reporting requirements, and supporting the organization’s compliance posture concerning offshore operations</li><li>Establish streamlined reporting mechanisms that meet both internal and external requirements.</li><li>Assess and manage the risks associated with offshoring arrangements. Ensure that appropriate controls and mitigations are in place to address any regulatory or compliance risks tied to offshore activities.</li></ul> ISG Service Portfolio Management:<ul style="list-style-type: disc;"><li>Develop and maintain a comprehensive service catalog that accurately reflects the services offered by ISG. Regularly review and update the service catalog to ensure it aligns with business needs and technological advancements.</li><li>Monitor the performance of ISG services to ensure they meet established service level agreements (SLAs) and key performance indicators (KPIs).</li><li>Compliance Management </li><li>Oversee the implementation and management of information security compliance across the bank, ensuring alignment with regulatory requirements and industry standards</li><li>Identify relevant regulatory obligations related to information security and ensure appropriate actions are taken to meet these requirements.</li><li>Manage and track compliance incidents and exceptions, ensuring proper documentation and resolution through GRC systems.</li></ul>GRC Function Automation: <ul style="list-style-type: disc;"><li>Be the owner of the bank’s GRC platform for ISG and oversee the management of the bank’s IS GRC solution. </li><li>Oversee the administration, configuration, and maintenance of the GRC platform to ensure optimal performance and availability</li><li>Enable centralized knowledgebase and GRC solution to automate Information Security activities and governance process with a centralized risk register, risk reports and dashboards related to overall risk posture for specific location and business unit. </li><li>Automate the GRC functions and reduce manual efforts to provide near real time insights into risks by performing quantitative and qualitative assessments. </li><li>Support local CISO’s / IS SPOCs in regulatory audit discussion and data required from ISG and enabling the local CISOs with Archer access to onboard the open issues for centralized tracking and governance.</li><li>Ensure that the solution is effectively used to support the organization’s information security governance, risk, and compliance activities</li></ul></td></tr></tbody></table></figure> <figure class="table"><table border="1" cellspacing="0" cellpadding="0" width="751" style="border-collapse: collapse; border-width: medium; border-style: none; border-color: currentcolor; border-image: initial;"><tbody><tr><td width="716" valign="top" style="border-width: 2.25pt 2.25pt medium medium; border-style: solid solid none none; border-color: windowtext windowtext currentcolor currentcolor; padding: 0in 5.4pt; width: 537.15pt;">Operating Environment, Framework and Boundaries, Working Relationships</td></tr><tr><td width="716" valign="top" style="border-width: 1pt 2.25pt; border-style: none solid solid; border-color: currentcolor currentcolor windowtext; padding: 0in 5.4pt; width: 537.15pt;"><ul style="list-style-type: disc;"><li>Operating environment: All the locations where Mashreq Bank is operational</li><li>Frameworks: Information security policy manual, regulations, industry best practices and contractual requirements. </li><li>Working Relationship: All Business, Governance, Enabling and Control groups. </li></ul> </td></tr><tr><td width="716" valign="top" style="border-width: medium 2.25pt 1.5pt medium; border-style: none solid solid none; border-color: currentcolor windowtext windowtext currentcolor; padding: 0in 5.4pt; width: 537.15pt;"><h1>Problem Solving</h1></td></tr><tr><td width="716" valign="top" style="border-width: medium 2.25pt; border-style: none solid; border-color: currentcolor windowtext; padding: 0in 5.4pt; width: 537.15pt;"><ul style="list-style-type: disc;"><li>Ability to enable framework, solution, and processes for proactive management of information security risks </li><li>Ability to understand regulatory language, can take decisions on applicability, compensating controls and residual risk. </li><li>Ability to derive residual risk and control based on defense – in depth strategy and systemic risk while taking risk and control decisions. </li></ul> </td></tr><tr><td width="716" valign="top" style="border-width: 1.5pt 2.25pt 1.5pt medium; border-style: solid solid solid none; border-color: windowtext windowtext windowtext currentcolor; padding: 0in 5.4pt; width: 537.15pt;"><h1>Decision Making Authority & Responsibility</h1> </td></tr><tr><td width="716" valign="top" style="border-width: medium 2.25pt; border-style: none solid; border-color: currentcolor windowtext; padding: 0in 5.4pt; width: 537.15pt;"><ul style="list-style-type: disc;"><li>Consult and validate recommendations to mitigate information security risks</li><li>Consult and provide recommendations to mitigate the risk to a level aligned with the risk appetite of the bank. </li><li>Assure compliance with regulatory expectation and avoid regulatory penalties.</li><li>Confirm adequacy of the controls against internal information security policy, standards and applicable regulatory requirements.</li></ul> </td></tr><tr><td width="716" valign="top" style="border-width: 1.5pt 2.25pt 1.5pt medium; border-style: solid solid solid none; border-color: windowtext windowtext windowtext currentcolor; padding: 0in 5.4pt; width: 537.15pt;"><h1>Knowledge, Skills, and Experience</h1></td></tr><tr style="height: 92.1pt;"><td width="716" valign="top" style="border-width: medium 2.25pt 1pt; border-style: none solid solid; border-color: currentcolor windowtext windowtext; height: 92.1pt; padding: 0in 5.4pt; width: 537.15pt;">Essential knowledge<ul style="list-style-type: disc;"><li>Have around 10+ years of experience in a Banking environment and over 3 years of experience in information security. </li><li>Familiarity with information security technologies, risk, threat and vulnerability assessments, and security measures. </li><li>Experience with governance, risk management, and compliance frameworks (e.g., ISO 27001, NIST, GDPR, PDPL).</li><li>Hold professional certifications (e.g., CISA, CISM, CISSP, CRISC)</li></ul>Skills and Application <ul style="list-style-type: disc;"><li>Strong communication and interpersonal skills.</li><li>Ability to manage multiple projects and priorities.</li><li>Proficiency in security tools and technologies.</li></ul>Strategic Insight<ul style="list-style-type: disc;"><li>Foster a culture of security awareness and compliance within the organization.</li><li>Continuously improve the information security posture of the organization.</li><li>Ensure that information security risks are effectively managed and mitigated.</li></ul> </td></tr></tbody></table></figure> <div> The leading financial institution in MENA </div> <div> While more than half a century old, we proudly think like a challenger, startup, and innovator </div> <div> in banking and finance, powered by a diverse and dynamic team who put customers first. </div> <div> Together, we pioneer key innovations and developments in banking and financial services. </div> <div> Our mandate? To help customers find their way to Rise Every Day, partnering with them through </div> <div> the highs and lows to help them reach their goals and unlock their unique vision of success. </div> <div> Delivering superior service to clients by leading with innovation, treating colleagues with dignity and fairness while pursuing opportunities that grow shareholders value. </div> <div> We actively contribute to the community through responsible banking in our mission to inspire more people to Rise. </div>