Information Security Officer
Information Security Officer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Information Security Officer
Maintain Operational Systems Networks and Security
-
Facilitate annual PCI audits and ensure ongoing compliance.
-
Ensure Linux systems are patched promptly and securely coordinating through the correct change control process if customer impact is anticipated.
-
Maintain and monitor Elastic SIEM respond to alerts and perform in-depth investigations.
-
Troubleshoot system issues across all technology stacks including production/QA environments databases networks and integrations.
-
Deploy and manage tooling to enhance operations security and efficiency.
-
Research and implement new tools (open source or commercial) that improve system performance monitoring logging security or compliance.
-
Develop Python scripts and tools to automate repetitive tasks.
AWS Cloud Infrastructure
-
Securely architect and manage AWS services including but not limited to:
-
VPC EC2 ECS/Fargate ECR
-
GuardDuty CloudWatch CloudTrail
-
Load balancers VPNs and WAFs
-
-
Maintain robust connectivity between third parties banking partners and on-premises data centres.
-
Implement and enforce best practices in system isolation scope reduction and security.
Hardware Security Modules (HSM)
-
Support field engineers and maintain internal HSMs (Futurex Thales).
-
Conduct key management ceremonies and maintain PCI compliance.
Security Governance & Compliance
-
Assist with audits and regulatory requirements including:
-
PCI-DSS & PCIPIN
-
ISO 27001 (Stretch goal)
-
GDPR
-
-
Maintain accurate and current documentation of infrastructure procedures and security policies.
-
Promote a security-aware culture within the company.
Automation & Efficiency
-
Implement automation to enhance both infrastructure and security management.
-
Optimise costs while maintaining high security and performance standards.
Security Monitoring & Reporting
-
Ensure weekly vulnerability scans are completed tracked and resolved within SLA.
-
Review and sign off on daily/weekly PCI business-as-usual activities.
-
Analyse data and report security metrics monthly.
-
Collaborate with 3rd parties to complete and pass PCI certification audits.
-
Review and uphold The Companys security commitments to external partners.
What Were Looking For
Qualifications & Experience
-
Bachelors degree in Computer Science Information Security or related field.
-
At least 3 years relevant experience in security or infrastructure roles.
-
Experience in the payments or banking sector preferred.
-
Familiarity with PCI audits DevOps practices Linux MySQL and AWS.
Skills & Knowledge
-
Strong understanding of PCI-DSS requirements and security standards.
-
Hands-on experience with:
-
Linux (security patching system administration)
-
MySQL
-
AWS services and virtual networking (VPC ALB/NLB WAF VPNs etc.)
-
Automation tools: CloudFormation Ansible Puppet Chef
-
CI/CD: Bitbucket Pipelines Jenkins
-
Scripting: Bash Python
-
Containers: Docker Kubernetes ECS
-
Monitoring: Zabbix Nagios
-
Logging & SIEM: ELK Stack CloudWatch Elastic Splunk
-
Employment Type
Full Time
