Sr. Information Security Engineer

Job Description

Set & Manage Compliance Program for Information & Cyber Security Requirements (e.g. regulatory, ISO27001 standards, PCI DSS) Develop a set of security standards, technical solutions, strategies, ISO requirements and best practices for the organization, and recommend security enhancements to management as needed. Youll drive large programs across teams to address Information Security needs & influence the successful, on-time, and on-budget delivery of Information Security projects. Develop, Maintain & oversee Information Security Policies, Processes and standards/guidelines to address all applicable regulatory and ISO requirements. Work on new security tools to help mitigate security vulnerabilities and automate repeatable tasks. Development and implementation of Information & Cyber Security Assurance Program Manage Third Party Risk Assessment Program Handle InfoSec Audits (internal/external), Conduct Awareness Trainings You will assist the organization towards planning and carrying out an organizations needs on InfoSec aspect & influence the successful, on-time, and on-budget delivery of Information Security projects. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement. Industry Fintech/ Payments, Banking, Network, Consulting Desire 7 years of relevant experience with Software Companies (Banking/Payments/Fintech domain is preferred) Bachelors degree with a preference in Engineering, or technical related field with relevant certifications in security-based specialization. Experience driving and governing audits and practice standardization (PCIDSS, ISO 27001, etc) across multiple teams. Hands on experience with audits, InfoSec compliances, Vulnerability assessments. Experience with technologies and processes such as networks, encryption, vulnerability management, identity and access management, endpoint management, risk management, and cloud services. Good to have Familiarity and understanding of OWASP. Basic knowledge of software development lifecycles and methodologies Experience presenting and influencing top-line management and executives on the importance of Information Security. Expert problem solver, using proven methods to solve difficult issues effectively Proven conflict management skills and remains composed under pressure Good understanding of infrastructure, including web & cloud technologies and network architecture.

More Info

Education