Information Security Lead

Responsibilities

• Manage and operate security controls throughout the enterprise, including providing oversight and verification of user and customer lifecycle and access controls.
• Work with engineering, systems, and product teams to manage the security implications and components of new projects.
• Develop and maintain policies and plans, including incident response, disaster preparedness, PCI, privacy, and data protection compliance.
• Prepare, deliver, and verify company-wide infosec awareness training, including the specialist training of frontline and back-office IT staff.
• Monitor key infosec platforms, including endpoint antivirus, remote access, authentication, firewalls, and intrusion detection - conduct investigations as needed.
• Operate vulnerability and risk management tools, prioritizing remediation.
• Provide updated infosec risk assessments, proposing mitigation and new initiatives to address emerging threats, platform/vendor obsolescence, etc.
  

Requirements

• 8+ years of overall work experience in the information security domain.
• Prior experience in the Fintech/Startup industry.
• Must have sufficient domain technical experience to perform risk assessments, operate vulnerability management and other security tools, guide incident response, act on emerging threats, lead technical implementation projects, and work closely with engineering and infrastructure teams.
• Hands-on approach to solving complex security problems.
• Experience with managing enterprise-grade security tools and infrastructure.
• Experience in audit, assurance, and compliance in a corporate environment, working with internal and external audit teams and authorities.
• Experience with control frameworks such as CIS, NIST, or derivatives, COBIT, or similar preferred.
• Experience developing and implementing infosec-related policies, including communications, change management, and related employee training.
• Working knowledge of Cloud environments like AWS, GCP is beneficial.
  

Preferred Qualifications

• Bachelor's degree in computer science, information technology, or Information security.
• Relevant certifications (e. g., ISO 27001 Lead Auditor Lead Implementer, CISA, CISM, CISSP, etc. ).