{"id":4338352,"url":"https://alion.io/job/dsquares-security-manager","title":"Security Manager","company":{"id":57499,"name":"Dsquares","domain":"dsquares.com","url":"https://alion.io/company/dsquares","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Legal","role_family":"Legal","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-15T16:28:28Z","employer_posted_date":"2026-11-15","last_verified_at":"2026-11-15T16:28:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We are hiring a Security Manager to own our security and compliance program end to end. Most of the\nrole is Governance, Risk and Compliance (GRC): building the framework, running audits, and keeping us\naligned with regulators and partners. The rest is hands-on assurance: you can scope and challenge a\npenetration test, and you understand cloud and infrastructure security well enough to set direction for\nengineering.\nKey Responsibilities:\nGovernance, risk and compliance\nOwn the information security management system: policies, standards, procedures and the controls library.\nLead certification and audit programs (ISO 27001, SOC 2, PCI DSS where in scope), from gap assessment through external audit and continuous monitoring.\nRun our compliance automation platform (e.g. Vanta): control mapping, evidence collection, and keeping integrations accurate.\nMap and maintain compliance with Egyptian regulation, including FRA consumer finance requirements, Central Bank of Egypt guidance where applicable, and the Personal Data\nProtection Law (Law 151 of 2020).\nMaintain the enterprise risk register: identify, score and track security and technology risks, and report them to leadership and the board.\nRun third-party and vendor risk management, including security reviews of merchants, banks,\nKYC and cloud providers.\nHandle security questionnaires and due diligence from banks, card networks, partners and investors.\nOwn business continuity and disaster recovery planning, and test it at least yearly.\nSecurity assurance and penetration testing\nDefine the yearly testing plan across web, mobile, API and cloud.\nScope, procure and manage external penetration testers and red-team engagements; challenge findings and severity ratings.\nRun or validate internal testing where useful, using tools such as Burp Suite, OWASP ZAP or Nmap.\nOwn the vulnerability management lifecycle: triage, SLAs by severity, remediation tracking and retesting.\nEmbed secure SDLC practices with engineering: threat modelling, secure code review guidance,\nand SAST, DAST, SCA and secrets scanning in CI/CD.\nInfrastructure and cloud security\nSet the security baseline for cloud (AWS/GCP), Kubernetes and containers, networks and endpoints.\nOwn identity and access management: least privilege, MFA, privileged access, joiner-mover-leaver and periodic access reviews.\nDefine encryption, key management and data protection standards, including handling of PII and payment data.\nOversee logging, monitoring and detection (SIEM, cloud security posture management) together with engineering.\nLead incident response: playbooks, on-call escalation, post-incident reviews, and regulator or partner notification when required.\nLeadership and culture\nBuild the security roadmap and budget, and present posture and risk to the CTO, leadership and board.\nRun security awareness training and phishing simulations for all staff.\nAct as the security partner to product and engineering, enabling delivery rather than blocking it.\nGrow the function over time through hires, contractors or managed services as the business scales.\nRequirements\n8+ years in information security, with at least 3 years leading a GRC or security program.\nHands-on experience taking a company through ISO 27001 and/or SOC 2 certification, ideally as the owner rather than a contributor.\nSolid knowledge of PCI DSS and of security expectations in regulated financial services (fintech, banking, payments).\nWorking knowledge of Egyptian regulation relevant to fintech and personal data, or a proven record of quickly mapping a new regulatory regime into controls.\nPractical penetration testing background: you have run tests yourself or managed testers closely, and can read a report critically. OWASP Top 10 (web, API and mobile) is familiar ground.\nStrong infrastructure and cloud security knowledge: AWS or GCP, IAM, network segmentation, Kubernetes and containers, encryption and key management.\nExperience leading incident response from detection to post-mortem\nClear written and spoken English and Arabic. You can explain risk to a board and argue a fix with an engineer.\nCertifications (at least one expected): CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Lead Auditor.\nTechnical certifications (a strong plus): OSCP, CEH, or a cloud security certification (AWS Security Specialty, CCSP).\nNice to have\nExperience with Vanta, Drata or a similar compliance automation tool.\nExposure to card-network or bank partner security assessments.\nExperience building a security function from scratch at a startup.\nBenefits\n Comprehensive Wellbeing: Enjoy peace of mind with ourprivate medical insurance and life cover, plus extra days off for every year you're part of the team. \n Financial Growth: Reap the rewards of your hard work with our annual profit share and competitive compensation packages.\n Work-Life Balance: Achieve optimal well-being with our hybrid work environment, generous maternity and paternity benefits, and regular team-building events.\n Continuous Development: Expand your horizons through our commitment to learning and development opportunities. \n Perks and Privileges: Celebrate your journey with us through birthday offs, mobile allowances, transportation support, and a host of other employee-centric perks.","description_format":"text","description_chars":5275,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Hybrid work"],"hiring_locations":[{"name":"Egypt","iso":"EG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Loyalty Programs"],"lifecycle":[{"event":"open","at":"2026-11-15T16:28:28Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:1","win:early"],"computed_at":"2026-11-15T17:28:36Z"},"pay":null,"html_url":"https://alion.io/job/dsquares-security-manager","json_url":"https://alion.io/job/dsquares-security-manager.json","meta":{"generated_at":"2026-11-15T17:28:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9663,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":57499},"rest":"https://alion.io/mcp/rest/get_company?id=57499"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdsquares-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdsquares-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdsquares-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dsquares-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdsquares-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4338352}},{"tool":"search_jobs","arguments":{"company":"dsquares.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4338352},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}