وظائف مهندس GRC بشركة Paymob

SENIOR GRC ENGINEERS

#Paymob is currently looking for Senior GRC Engineers!

Job Description:

• Review and update the security policies at least once per year to ensure that company’s security policies are updated, and employees are aligned with company’s security standards.
• Responsible for PCI certification throughout an audit cycle which includes updated network and data flow diagrams, security requirements & vulnerability and risk assessment to ensure that Paymob payment solutions is trusted for both customers and banking sector.
• Apply audit checks to external vendors & partners through questionnaires to make sure that all external relationships are meeting Paymob’s security standards.
• Provide external vendors & partners with the needed security information for their assurance.
• Ensure compliance with industry standards and regulations to assure the company’s assets protected.

Job Requirements:

• 4-6 years of experience in GRC
• Bachelor’s degree in communication engineering or Computer Science
• Professional certifications in GRC or related areas, such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), GRCA OR GRCP are highly recommended.
• Strong understanding of governance, risk management, and compliance frameworks, methodologies, and best practices.
• Experience in implementing and managing GRC programs, policies, and procedures within an organization.
• Familiarity with relevant regulatory frameworks and standards, such as ISO 27001, NIST Cybersecurity Framework, GDPR, PCI DSS, etc.
• Knowledge of risk assessment methodologies, including identification, analysis, evaluation, and Proficient in conducting risk assessments, vulnerability assessments, and control gap analyses.
• Experience in designing and implementing risk management frameworks and processes.
• Understanding of compliance requirements specific to the organization’s industry and the ability to interpret and apply them effectively.
• Knowledge of audit frameworks and methodologies, and the ability to support internal and external audit processes.