Your safety comes first â read before you go. Taf4All only lists job offers published by third parties. We are not the employer, we do not conduct these recruitments, and we cannot guarantee what happens once you make contact â you deal directly with the person or company behind the offer, at your own risk.
POST: RCMP Engineer â Governance, Risk and Compliance Cybersecurity / Casablanca or Dakar
Education / Qualifications
As part of the strengthening of its Information Systems Security Directorate (DSSI) Group, BANK OF AFRICA is looking for an GRC Engineer â Governance, Risks and Compliance Cybersecurity.
Main duties
Contribute to the governance and evolution of the Groupâs security framework;
Conduct and consolidate SSI risk analysis and mapping;
Participate in maintaining compliance with ISO/IEC 27001 and PCI DSS standards;
Contribute to controls, certifications and conformity assessments;
Follow up on recommendations, remediation plans, waivers and risk acceptances;
Consolidate KPI/KRI cybersecurity and contribute to Group reporting;
Support CISOs and the various Group entities in deploying security requirements.
Candidate profile
Bac+5 in cybersecurity, IT security, audit, IT risks or equivalent training;
Experience
Minimum of 5 years of experience, ideally in the banking or financial sector;
Good knowledge of ISO/IEC 27001, PCI DSS and risk analysis methodologies;
An ISO 27001 Lead Implementer/Lead Auditor, ISO 27005 Risk Manager, CRISC, CISA or CISM certification is an asset;
Excellent analytical, synthesis and writing skills;
Rigor, autonomy, a sense of confidentiality and aptitude for transversal work.
Location
Location: Casablanca or Dakar
Perimeter: Bank Of Africa Group and subsidiary
<a href="https:
Taf4All only lists job offers published by third parties. We are not the employer, we do not conduct these recruitments, and we cannot guarantee what happens once you make contact â you deal directly with the person or company behind the offer, at your own risk.
âąNever pay any amount of money â for a file, a training, a uniform, or an interview. A real employer never asks the candidate to pay.
âąNever send a photo of your ID card, passport, or banking details before you have physically verified the employer exists.
âąAlways meet in a public place, during the day â never an isolated address, a private home, or a location you cannot verify in advance.
âąTell a relative or friend exactly where you are going, with whom, and at what time â and share your live location if possible.
âąSearch the company name online before going: a real business has a trace (website, reviews, other employees, an official address).
âąA salary that is far above the market rate for the position and the city is a red flag â be extra cautious.