Risk Officer – Information Security position at Deloitte Cairo 2026
Applicant criteria
- No specific age required
- Both
Opportunity criteria
- Full time
Opportunity description
Deloitte, the world’s leading professional services firm, is seeking a highly skilled Risk Officer – Information Security to join its Deloitte Innovation Hub (DIH) in Cairo, Egypt. This role is central to safeguarding the organization's information assets and enhancing its risk management framework within one of the most strategic tech initiatives in the region.
About Deloitte Innovation Hub (DIH):
Established by Deloitte North & South Europe (NSE), the DIH is a strategic center aimed at scaling delivery footprints across EMEA. It focuses on complex technical solutions in Cyber, AI & Data, Engineering, and Cloud, aiming to become the premier destination for top tech talent in Egypt.
Financial Benefits
- Competitive salary
- Comprehensive insurance coverage
- Opportunities for professional growth and development
Duties & responsibilities
Risk Management: Maintaining and updating risk documentation and managing the Business Priority Risk Register.
Assessments: Conducting regular risk assessments to identify threats and vulnerabilities affecting the Hub.
Compliance: Reviewing adherence to information security policies (e.g., data classification, clear desk) and recommending corrective actions.
Training: Delivering awareness programs to staff to foster a strong risk-aware culture across the firm.
Monitoring: Reporting on the performance of security frameworks against established KPIs to the Risk Leader.
Technical Oversight: Coordinating vulnerability assessments and penetration testing activities, ensuring all findings are remediated.
Incident Response: Acting as a key contact for security incident planning, execution, and investigation.
Eligibility criteria
To be considered for this role, you must meet the following requirements:
Education: Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or a related discipline.
Experience: At least 7+ years of professional experience in information security or risk management within large-scale organizations.
Mandatory Certifications: You must hold a CISM (Certified Information Security Manager) and/or CISSP (Certified Information Systems Security Professional) certification.
Preferred Certifications: ISO 27001 Lead Implementer and/or ISO 27701 Lead Implementer certifications are highly desirable.
Core Skills: Strong business acumen to translate technical risks into business impact, excellent communication skills, and the ability to manage conflicts and build collaborative relationships.