Who we are?- onebank was established in 2020 as the company responsible for launching the 1st digital native bank in Egypt. The digital bank aims to create innovative solutions tailored to serve the needs of the banking customers in Egypt.-Our main goal is to create a positive customer experience through the differentiated journey that our customers live while using the digital bank.-Our Drive: We use our drive and commitment to energies, engage and inspire others, upholding the highest standards of work ethic, honesty and morality.JOB PURPOSEEnsuring that the organization adheres to information security laws, regulations, and industry standards Including ISO27001 & PCI-DSS compliance & certifications.MINIMUM QUALIFICATIONS/EDUCATION/EXPERIENCEBachelor's degree in information technology, computer science, or a related field-Certifications:- ISO27001 LA or ISO 27001 LI- PCI- GRCP- GRCA- 5-7+ years of experience in Information technology (IT) and Information security- Experience in ISO & PCI compliance and surveillance.- CBE CSFJob Duties & Responsibilities Collaborate with internal teams and provide guidance and support to address security gaps or non-compliance issues in a timely mannerCoordinate and facilitate internal and external audits to evaluate the effectiveness of information security controls and ensure compliance with internal policies and external regulations by preparing relevant documentation and evidence to support the audit process and facilitating interviews, data collection, and analysis during the audit, and coordinating follow-up actions to address audit findings.Prepare reports on information security compliance status and progress to ensure transparency and accountability to be presented to management and relevant committees with the necessary information to make informed decisions and prioritize actions.Assuring compliance to security best practices, standards (ISO27001:2013 and PCI-DSS 3.1) and regulatory (CBE CSF) to mitigate risks, protect sensitive information, and maintain customer trust.Ability to lead and manage cross-functional teams and projects to successfully execute information security compliance projects and meet compliance requirements by clearly define project objectives, scope, and deliverables in addition to monitor project progress, identify and address any obstacles or challenges, and provide guidance and support as needed.In-depth understanding of information security regulations and relevant industry standards ISO27001 & PCI-DSSConducting regular assessments, audits, and gap analyses including third-party audits to identify areas of non-compliance in addition to Developing and implementing remediation plans, monitor compliance, and provide guidance to stakeholders to meet security standards and regulatory requirements.Stay up to date with evolving compliance requirements and industry best practices by proactively reaching out to regulatory bodies, auditors, and external stakeholders