Position: Information Security Officer
Company: DataArt
Experience required: 3y
English level: intermediate

About the vacancy

DataArt’s client is a fintech startup. It provides an electronic banking service for Asian countries and works on the principle of digital bank accounts, supplemented by a card. The client’s headquarters are located in Kuala Lumpur, and there are also offices in Singapore and London.

Responsibilities
- Penetration testing
- Quarterly vulnerability assessments
- Enhancement of VA scans
- Review of the Linux AV solution
- Weekly security review of IT Issues
- Periodical AppSec reviews
- Review of security advisories
- RMiT
- Tracking of IT contracts and vendor certificates
- Yearly PCI-DSS self-assessments
- Yearly “Table Top” exercise

Must have
- 5+ years of experience in IT security, good familiarity with different technologies and architectures (e.g. Linux, Windows, Active Directory, SQL, cloud platforms, etc.)
- Minimum 1 year of experience performing vulnerability assessments and penetration tests
- Excellent understanding of web application vulnerabilities
- Experience with open-source and commercial security tools (e.g. Nessus, Nmap, Burp, sqlmap, etc.)
- Knowledge of programming and scripting for the development of auxiliary security tools
- Strong experience in information security risk management and governance, threat modeling, and risk analysis
- Master's degree in computer science/engineering or a related technical or business discipline or equivalent experience is required
- Advanced English
- Good Leadership and Communication skills

Would be a plus
- Security certificates (CISSP, CISM, CASP, OSCP+ etc.)
- Be familiar with common security standards (PCI DSS, ISO 27000, etc.)
- Practical experience with Google Cloud Platform

Learn more about our policy of equal opportunities in employment