The job

The Technical Program Compliance team ensures the organization Solutions are always in compliance with the necessary security and compliance programs. We create, improve, and maintain security and compliance policies and processes, ensure such governing artefacts are communicated, and adhere to without compromise.

You will be directly lead and contribute to the continued building and managing of security and compliance artefacts. You will facilitate the planned security and compliance programs working closely with Product, Engineering and Infrastructure teams and be the liaison to the engaged lab assessor. You will establish the program plan, ensure transparency on the program status, risk and reporting to the relevant stakeholders.

Responsibilities

1. Manage Security Audits, Compliance certification and/or attestation.
2. Create and maintain security artefacts, including but not limited to information security policies, cybersecurity strategy, identity and access policies, and cyber incidents response process.
3. Review investigations on breaches or cybersecurity incidents, including impact analysis and recommendations to avoid similar vulnerabilities.
4. Ensure compliance in accordance with the changing of laws and applicable regulations.
5. Make sure prompt training, updates, communications to all personnel to ensure compliance is enforced.
6. Maintain up-to-date understanding of current Information Technology threats and translate that knowledge to the identification of risks and actionable plans.

Qualifications:

1. Bachelor’s degree in Computer Science or equivalent experience.
2. 5 years of experience managing security and compliance programs.
3. Experience in information security, compliance and/or risk management.
4. Experience with infrastructure systems, security assessments and security processes.

Preferred qualifications:

1. Experience in information security, compliance, and/or risk management for payment and/or financial industry.
2. Experience with security assessment for Payment Card Industry (PCI) programs including but not limited to PCI DSS and PCI PIN.
3. Effective and fluent communication skill in relation to compliance.