IT Security Lead
Integrant · Cairo, Egypt · 1mo ago
Integrant is looking for a highly experienced, hands-on IT Security Lead to own and continuously improve our IT infrastructure, enterprise technology environment, cybersecurity, and information security practices.
This is a highly technical role for someone who combines strong infrastructure and IT operations expertise with solid cybersecurity and Governance, Risk & Compliance (GRC) capabilities.
The successful candidate will be comfortable moving between strategy and execution—designing technical solutions, troubleshooting complex issues, strengthening security controls, driving infrastructure improvements, supporting compliance initiatives, and leading strategic projects such as ISO 27001
Key Responsibilities
Cybersecurity
Strengthen security across Integrant's infrastructure, cloud services, endpoints, identities, and corporate technology ecosystem.
- Continuously assess the organization's cybersecurity posture and identify vulnerabilities and control gaps.
- Design and implement appropriate preventive, detective, and corrective security controls.
- Own vulnerability management, security hardening, remediation, and patching priorities.
- Strengthen endpoint, network, identity, email, and cloud security.
- Implement security principles including Zero Trust, least privilege, defense in depth, and secure-by-default configurations.
- Improve security monitoring, detection, investigation, and response capabilities.
- Lead or support cybersecurity incident investigation, containment, root-cause analysis, and remediation.
- Evaluate cybersecurity technologies and recommend improvements to the organization's security architecture.
Information Security, Governance, Risk & Compliance (GRC)
Ensure Integrant maintains effective information security governance while meeting business, customer, and compliance expectations.
- Support and continuously mature Integrant's Information Security Management System (ISMS).
- Lead or support ISO 27001 activities, SOC || including risk assessments, control implementation, audits, remediation, and continuous improvement.
- Maintain and improve information security policies, standards, procedures, and technical controls.
- Conduct information security risk assessments and drive appropriate risk-treatment plans.
- Maintain visibility of security risks, control gaps, remediation actions, and exceptions.
- Support internal and external security audits.
- Participate in customer security assessments and security questionnaires when required.
- Assess security risks associated with vendors, SaaS platforms, and third-party technology providers.
- Establish meaningful security metrics and provide management with visibility into key risks and improvements.
Cloud & SaaS Security
Ensure that Integrant's cloud and SaaS environments remain secure, well-governed, and appropriately monitored.
- Establish and maintain secure configurations across Azure, AWS, Microsoft 365, and other SaaS platforms.
- Strengthen cloud identity, privileged access, workload, data, and configuration security.
- Improve logging, monitoring, and visibility across cloud services.
- Identify cloud misconfigurations and security gaps and drive remediation.
- Evaluate the security implications of new cloud services and integrations before adoption.
- Implement appropriate secrets, keys, and privileged access management practices.
Identity & Access Management
Drive a strong identity-first security model across the organization.
- Own and continuously improve Identity & Access Management practices.
- Strengthen authentication, authorization, MFA, Conditional Access, and privileged access.
- Apply least-privilege principles across users, administrators, systems, and services.
- Improve joiner, mover, and leaver access processes.
- Regularly review privileged and sensitive access.
- Support the organization's evolution toward Zero Trust principles.
Security Operations & Resilience
Build effective capabilities for detecting, responding to, and recovering from technology and security incidents.
- Maintain appropriate SIEM, EDR/XDR, vulnerability management, monitoring, and alerting capabilities.
- Define and continuously improve incident response processes and playbooks.
- Ensure security events are appropriately investigated, documented, and remediated.
- Conduct root-cause analysis following major incidents.
- Strengthen backup, disaster recovery, and business continuity readiness.
- Periodically test recovery and incident-response capabilities.
AI & Emerging Technology Security
Support Integrant's adoption of AI technologies while ensuring appropriate security and governance.
- Evaluate security risks associated with Generative AI and emerging technologies.
- Establish appropriate security controls and guidelines for corporate AI usage.
- Address risks related to sensitive data exposure, unauthorized AI tools, third-party AI platforms, and insecure integrations.
- Partner with relevant stakeholders to enable innovation while maintaining appropriate security safeguards.
Application Security – Future Growth Area
As Integrant's security maturity evolves, the role will partner with Engineering teams to expand security practices into the software development lifecycle.
Potential areas include:
- Secure SDLC
- DevSecOps
- Threat modeling
- SAST / DAST
- CI/CD security
- Container and Kubernetes security
- Secure coding practices
Deep application security expertise is not a core requirement for joining the role, but previous exposure would be a strong advantage.
Technical Leadership & Collaboration
- Act as a senior technical reference point for security topics.
- Provide technical guidance and mentorship to IT team members.
- Lead complex infrastructure, security, compliance, and technology projects.
- Collaborate with Engineering, HR, Operations, and business stakeholders.
- Communicate technology and security risks clearly to senior management.
- Drive accountability for technical improvements and remediation initiatives.
Formal people-management experience is considered a nice-to-have rather than a core requirement.
- 8+ years of progressive experience across IT Infrastructure, Systems Engineering, Cloud, Cybersecurity, or related technology functions.
- Strong understanding of cybersecurity principles and enterprise security controls.
- Experience with Information Security, risk management, and GRC practices.
- Practical exposure to ISO 27001 or similar information security frameworks.
- Strong understanding networking, firewalls, VPNs, endpoints, and enterprise infrastructure.
- Experience securing cloud environments, preferably Azure and/or AWS.
- Strong knowledge of IAM, privileged access, MFA, Conditional Access, and least-privilege principles.
- Experience with vulnerability management, endpoint security, monitoring, and incident response.
- Ability to independently investigate complex infrastructure and security problems and drive them through resolution.
- Strong project ownership and stakeholder-management capabilities.
- Ability to communicate technical risks and recommendations to both technical and non-technical stakeholders.
Nice to Have
- Experience technically mentoring or supervising an IT team.
- ISO 27001 Lead Implementer / Lead Auditor experience.
- Experience with Microsoft Defender, Sentinel, Intune, Purview, or similar platforms.
- Application Security or DevSecOps exposure.
- AI security/governance experience.
- Automation using PowerShell, Python, or similar technologies.
- Infrastructure as Code exposure.
- Relevant certifications such as CISSP, CISM, CCSP, ISO 27001, SC-100, AZ-500, or equivalent.
- Salary paid in USD
- Six-month career advancing opportunities
- Supportive and friendly work environment
- Premium medical insurance [employee +family]
- English language development courses
- Interest-free loans paid over 2.5 years
- Technical development courses
- Planned overtime program (POP)
- Employment referral program
- Premium location in Maadi
- Social insurance