IT Security Lead

Integrant is looking for a highly experienced hands-on IT Security Lead to own and continuously improve our IT infrastructure enterprise technology environment cybersecurity and information security practices.

This is a highly technical role for someone who combines strong infrastructure and IT operations expertise with solid cybersecurity and Governance Risk & Compliance (GRC) capabilities.

The successful candidate will be comfortable moving between strategy and executiondesigning technical solutions troubleshooting complex issues strengthening security controls driving infrastructure improvements supporting compliance initiatives and leading strategic projects such as ISO 27001

Key Responsibilities

Cybersecurity

Strengthen security across Integrants infrastructure cloud services endpoints identities and corporate technology ecosystem.

• Continuously assess the organizations cybersecurity posture and identify vulnerabilities and control gaps.

• Design and implement appropriate preventive detective and corrective security controls.

• Own vulnerability management security hardening remediation and patching priorities.

• Strengthen endpoint network identity email and cloud security.

• Implement security principles including Zero Trust least privilege defense in depth and secure-by-default configurations.

• Improve security monitoring detection investigation and response capabilities.

• Lead or support cybersecurity incident investigation containment root-cause analysis and remediation.

• Evaluate cybersecurity technologies and recommend improvements to the organizations security architecture.

Information Security Governance Risk & Compliance (GRC)

Ensure Integrant maintains effective information security governance while meeting business customer and compliance expectations.

• Support and continuously mature Integrants Information Security Management System (ISMS).

• Lead or support ISO 27001 activities SOC including risk assessments control implementation audits remediation and continuous improvement.

• Maintain and improve information security policies standards procedures and technical controls.

• Conduct information security risk assessments and drive appropriate risk-treatment plans.

• Maintain visibility of security risks control gaps remediation actions and exceptions.

• Support internal and external security audits.

• Participate in customer security assessments and security questionnaires when required.

• Assess security risks associated with vendors SaaS platforms and third-party technology providers.

• Establish meaningful security metrics and provide management with visibility into key risks and improvements.

Cloud & SaaS Security

Ensure that Integrants cloud and SaaS environments remain secure well-governed and appropriately monitored.

• Establish and maintain secure configurations across Azure AWS Microsoft 365 and other SaaS platforms.

• Strengthen cloud identity privileged access workload data and configuration security.

• Improve logging monitoring and visibility across cloud services.

• Identify cloud misconfigurations and security gaps and drive remediation.

• Evaluate the security implications of new cloud services and integrations before adoption.

• Implement appropriate secrets keys and privileged access management practices.

Identity & Access Management

Drive a strong identity-first security model across the organization.

• Own and continuously improve Identity & Access Management practices.

• Strengthen authentication authorization MFA Conditional Access and privileged access.

• Apply least-privilege principles across users administrators systems and services.

• Improve joiner mover and leaver access processes.

• Regularly review privileged and sensitive access.

• Support the organizations evolution toward Zero Trust principles.

Security Operations & Resilience

Build effective capabilities for detecting responding to and recovering from technology and security incidents.

• Maintain appropriate SIEM EDR/XDR vulnerability management monitoring and alerting capabilities.

• Define and continuously improve incident response processes and playbooks.

• Ensure security events are appropriately investigated documented and remediated.

• Conduct root-cause analysis following major incidents.

• Strengthen backup disaster recovery and business continuity readiness.

• Periodically test recovery and incident-response capabilities.

AI & Emerging Technology Security

Support Integrants adoption of AI technologies while ensuring appropriate security and governance.

• Evaluate security risks associated with Generative AI and emerging technologies.

• Establish appropriate security controls and guidelines for corporate AI usage.

• Address risks related to sensitive data exposure unauthorized AI tools third-party AI platforms and insecure integrations.

• Partner with relevant stakeholders to enable innovation while maintaining appropriate security safeguards.

Application Security Future Growth Area

As Integrants security maturity evolves the role will partner with Engineering teams to expand security practices into the software development lifecycle.

Potential areas include:

• Secure SDLC

• DevSecOps

• Threat modeling

• SAST / DAST

• CI/CD security

• Container and Kubernetes security

• Secure coding practices

Deep application security expertise is not a core requirement for joining the role but previous exposure would be a strong advantage.

Technical Leadership & Collaboration

• Act as a senior technical reference point forsecurity topics.

• Provide technical guidance and mentorship to IT team members.

• Lead complex infrastructure security compliance and technology projects.

• Collaborate with Engineering HR Operations and business stakeholders.

• Communicate technology and security risks clearly to senior management.

• Drive accountability for technical improvements and remediation initiatives.

Formal people-management experience is considered a nice-to-have rather than a core requirement.

• 8 years of progressive experience across IT Infrastructure Systems Engineering Cloud Cybersecurity or related technology functions.

• Strong understanding of cybersecurity principles and enterprise security controls.

• Experience with Information Security risk management and GRC practices.

• Practical exposure to ISO 27001 or similar information security frameworks.

• Strong understanding networking firewalls VPNs endpoints and enterprise infrastructure.

• Experience securing cloud environments preferably Azure and/or AWS.

• Strong knowledge of IAM privileged access MFA Conditional Access and least-privilege principles.

• Experience with vulnerability management endpoint security monitoring and incident response.

• Ability to independently investigate complex infrastructure and security problems and drive them through resolution.

• Strong project ownership and stakeholder-management capabilities.

• Ability to communicate technical risks and recommendations to both technical and non-technical stakeholders.

Nice to Have

• Experience technically mentoring or supervising an IT team.

• ISO 27001 Lead Implementer / Lead Auditor experience.

• Experience with Microsoft Defender Sentinel Intune Purview or similar platforms.

• Application Security or DevSecOps exposure.

• AI security/governance experience.

• Automation using PowerShell Python or similar technologies.

• Infrastructure as Code exposure.

• Relevant certifications such as CISSP CISM CCSP ISO 27001 SC-100 AZ-500 or equivalent.

• Salary paid in USD
• Six-month career advancing opportunities
• Supportive and friendly work environment
• Premium medical insurance employee family
• English language development courses
• Interest-free loans paid over 2.5 years
• Technical development courses
• Planned overtime program (POP)
• Employment referral program
• Premium location in Maadi
• Social insurance