Position: Information Security Officer
Company: Witty Global
Experience required: 3y
English level: fluent

A security specialist with strong working knowledge and understanding of information security frameworks (IS027001, ISAE3000/SOC2, SOC1, GPDR and PCI DSS), security operations and application security best practices. A versatile Security Officer, with experience working with public cloud, in particular AWS and the AWS security services. Particular exposure to developing, implementing, auditing and improving information security policies and procedures aligned to relevant industry frameworks/standards.

Main responsibilities: 
• Creating/maintaining an ISO27001 ISMS or PCI compliance project and operation.
• Performing Business Impact Analysis, risk assessment and treatment.
• Operating, maintaining, auditing and improving Vulnerability Management, SIEM and Threat Intelligence systems.
• Perform response analytics during and after an incident, determine root cause and proper mitigation of cyber security events.
• To remain up to date with the latest threats and vulnerabilities to ensure operational tools and processes are up to date, introduce process improvements and ensure incident response plans are up to date and effectively tested.
• Ensure that customer information and information systems are protected from unauthorized access / intrusion, use, disclosure, disruption, modification or destruction.
• Perform periodic internal audits against policies and procedures to ensure conformance.
• Participate and assist in external audit activities.
• Perform periodic audit, review and contribute to the continuous improvement of IT security standards, processes and procedures.
• Knowledge of various technologies and operating systems and their related security configuration, hardening and risks, ie Linux/Unix, Mac OS, Containers, Office 365, etc.
• Deliver Information Security and awareness training programs.
• Ability to prepare policies around data (GDPR), access controls and also implement these policies. 

Requirements:

Language proficiency 
• Advanced English level 
• Native Ukrainian or Russian language

Education 
• Bachelor Degree or above, Information Assurance and Security degree preferred 

Experience 
• 5+ years of experience in the payments industry required; mobile payment solutions preferred 
• 3+ years of experience with modern technology stacks, including cloud, big data, microservices, API's, etc. 
• 3+ years of experience with mobile products and their UX/UI design and enhancement 

Knowledge / skills 
• Strong working knowledge and understanding of information security frameworks (IS027001, ISAE3000/SOC2, SOC1, GPDR and PCI DSS) 
• Expertise in security technologies, systems, and applications 
• Strong knowledge of security services and processes 
• Professional Information Security Certification (CISM, CISSP) 
• Excellent problem-solving and analytical skills 
• Ability to educate a non-technical audience about various security measures 
• Strong business English communication skills, oral and written

Responsibilities: 
•	Evaluation of the projects; 
•	Customers interviewing; 
•	SRS/BRD writing; 
•	Structuring and improvement of technical documentation (internal and client's); 
•	Keeping technical documentation updated; 
•	Continual improvement of technical documentation; 
•	Evaluation of business analysis processes and continuously improve it. 
•	Establishing and following of requirements lifecycle processes; 
•	Participating in building business analysis processes; 
•	Identifying and defining business needs and goals; 
•	Active collaboration with stakeholders to reach a common understanding of the solution to address the needs.