We are looking for a InfoSec Engineer .You will play a critical role in identifying security threats in the organisation's infrastructure. You will be included in a dynamic and collaborative environment, where innovation and continuous learning are encouraged. You will have the opportunity to work alongside highly skilled engineers, engaging in information sharing and mentorship, which will further improve your professional growth and development. By demonstrating the latest tools, techniques, and methodologies, you can explore the depths of our networks, systems, and applications, meticulously seeking out malicious activities. Your expertise in threat hunting will enable us to stay one step ahead of cyber-criminals, safeguarding our organisation's critical assets and ensuring the integrity and confidentiality of our information systems.. Are you ready to revolutionize the small business banking industry with us?

About the Role:

• Strategic Compliance Planning: The Lead InfoSec Compliance develops and implements the organization's information security compliance strategy. This involves understanding the business goals and aligning the compliance activities accordingly.
• Regulatory Compliance: They ensure that the organization is in compliance with all applicable information security laws, regulations, and industry standards. This includes laws such as GDPR, CCPA, and USDP, as well as standards like PCI-DSS, ISO 27001, and NIST.
• Policy and Procedure Development: They oversee the development, implementation, and maintenance of information security policies, procedures, and controls. They make sure that these align with compliance requirements and the organization's risk tolerance.
• Compliance Audits and Assessments: The Lead InfoSec Compliance manages both internal and external audits and assessments of the organization's information security practices. They also address and rectify any compliance issues identified during these audits.

Requirements for the Role:

• Minimum 3-5 years of experience
• Bachelor's degree in Information Systems, Cybersecurity, Computer Science, or a related field.
• Certifications like Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are highly desirable.
• Minimum of 3-5 years of experience in IT security, compliance, or a related field.
• Understanding of information security principles and best practices
• Knowledge of security standards and regulations such as ISO 27001, NIST, GDPR, CCPA, PCI-DSS, HIPAA, SOX, etc.
• Experience in performing security audits, risk assessments, and in implementing security controls.
• Proficient in using compliance management tools and software.

How We Define Success:

• Reduced turnaround time for help desk queries.
• Timely completion of projects.

Nice To Have, but Not Required:

• System administration and IT certifications in Linux, Microsoft, or other network related fields are a plus
• Red Hat, Microsoft, ad Google certifications.
• Well versed with compliance requirements.