Position: Information Security Officer for innovative payment system
Company: OpenrndinUA
Category: Security
Experience required: 2y
English level: upper
Published: 2020-05-01T00:00:00+03:00

About
About II UK registered company
Company type II Money transfer solution: e-Wallet, Payment System, Payment Gateway (18 countries)
Background II Part of a Group of companies with strong financial background from the group of companies (more than 20 years on the market)
Management office II Kyiv
Head office II Dubai
Kyiv II R&D office in Guliver (now Creative States, separate office in progress)
Working schedule II in office full time, remote day negotiated personally
Employees II up till 30 people
Employment II Private entrepreneur
Bonuses II all you need for work in the office, snacks, paid sick days, paid vacation, medical insurance (in progress) + addition bonuses
Project type II fresh developed with clean track record

JOB PURPOSE:
We're looking for an experienced Information Security Officer for the eWallet / Payment System. A security specialist with strong working knowledge and understanding of information security frameworks (IS027001, ISAE3000/SOC2, SOC1, GPDR and PCI DSS), security operations and application security best practices. A versatile Security Officer, with experience working with public cloud, in particular AWS and the AWS security services. Particular exposure to developing, implementing, auditing and improving information security policies and procedures aligned to relevant industry frameworks/standards.

KEY ACCOUNTABILITIES:
✔ Creating/maintaining an ISO27001 ISMS or PCI compliance project and operation.
✔ Performing Business Impact Analysis, risk assessment and treatment.
✔ Operating, maintaining, auditing and improving Vulnerability Management, SIEM and Threat Intelligence systems.
✔ Perform response analytics during and after an incident, determine root cause and proper mitigation of cyber security events.
✔ To remain up to date with the latest threats and vulnerabilities to ensure operational tools and processes are up to date, introduce process improvements and ensure incident response plans are up to date and effectively tested.
✔ Ensure that customer information and information systems are protected from unauthorized access/intrusion, use, disclosure, disruption, modification or destruction.
✔ Perform periodic internal audits against policies and procedures to ensure conformance.
✔ Participate and assist in external audit activities.
✔ Perform periodic audit, review and contribute to the continuous improvement of IT security standards, processes and procedures.
✔ Knowledge of various technologies and operating systems and their related security configuration, hardening and risks, ie Linux/Unix, Mac OS, Containers, Office 365, etc.
✔ Deliver Information Security and awareness training programs.
✔ Ability to prepare policies around data (GDPR), access controls and also implement these policies.

JOB PROFILE REQUIREMENTS:
Language proficiency
✔ Advanced English level
✔ Native Ukrainian or Russian language

Education
✔ Bachelor Degree or above, Information Assurance and Security degree preferred

Experience
✔ 5+ years experience in the payments industry required; mobile payment solutions preferred
✔ 3+ years experience with modern technology stacks, including cloud, big data, microservices, API's, etc.
✔ 3+ years experience with mobile products and their UX/UI design and enhancement

Knowledge / skills
✔ Strong working knowledge and understanding of information security frameworks (IS027001, ISAE3000/SOC2, SOC1, GPDR and PCI DSS)
✔ Expertise in security technologies, systems, and applications
✔ Strong knowledge of security services and processes
✔ Professional Information Security Certification (CISM, CISSP)
✔ Excellent problem-solving and analytical skills
✔ Ability to educate a non-technical audience about various security measures
✔ Strong business English communication skills, oral and written

Responsibilities:
✔ Evaluation of the projects;
✔ Customers interviewing;
✔ SRS/BRD writing;
✔ Structuring and improvement of technical documentation (internal and client's);
✔ Keeping technical documentation updated;
✔ Continual improvement of technical documentation;
✔ Evaluation of business analysis processes and continuously improve it.
✔ Establishing and following of requirements lifecycle processes;
✔ Participating in building business analysis processes;
✔ Identifying and defining business needs and goals;
✔ Active collaboration with stakeholders to reach a common understanding of the solution to address the needs.
Responsibilities:
✔ evaluation of the projects;
✔ customers interviewing;
✔ SRS/BRD writing;
✔ structuring and improvement of technical documentation (internal and client's); Keeping technical documentation updated;
✔ continual improvement of technical documentation;
✔ evaluation of business analysis processes and continuously improve it. Establishing and following of requirements lifecycle processes;
✔ participating in building business analysis processes;
✔ identifying and defining business needs and goals;
✔ active collaboration with stakeholders to reach a common understanding of the solution to address the needs.