Information Security Officer

About the Company
RS2 offers secure payment services, payment software and managed services to clients in over 35 countries. The company upholds the highest industry standards and RS2’s in-house designed payments solution is the software of choice by many of the world’s leading and most innovative banks and financial institutions.

About the Role
Information Security Officers at RS2 are responsible for the organization, upkeep and implementation of the company’s Information Security strategy so as to safeguard the company’s data, systems and processes in a continuously-evolving ICT world. The person fulfilling this role will also be actively involved in helping to secure the company’s Software Development Lifecycle through the introduction, maintenance and improvement of security mechanisms, along with the promotion and enforcement of secure software design principles. Responsibilities
• Improving on the company’s SDLC from a security perspective by integrating security mechanisms throughout the process following a DevSecOps approach
• Assisting in technical code reviews and analysing software architecture from a security standpoint
• Conducting information security internal audits and risk assessment activities
• Performing, reviewing and scheduling penetration testing and vulnerability scans
• Engaging with information security assessors
• Maintaining compliance efforts against certifications such as PCI DSS and PCI SSF
• Participation in the design, documentation and review of new policies, processes and best practices
• Taking part in company-wide training efforts including Security Awareness Training and Secure Coding Training
• Assisting in monitoring and analyzing security alerts and information, and contributing to their resolution
• Compiling and maintaining security documentation
• Assisting with technical code reviews and promoting secure software design principles
• Performing various other duties which may be assigned from time to time Qualifications
• Bachelor’s degree in ICT and/or a specialised security certification (e.g. CISSP) Required Skills
• Minimum of 2 years’ experience in an Information Security role
• Knowledge of the latest PCI DSS, PCI SSF and ISO 27001/2 compliance standards
• Knowledge of secure software design principles and awareness of Security Knowledge Frameworks such as OWASP
• Penetration testing certification and/or equivalent experience in ethical hacking
• Experience of liaising with external security auditors
• Ability to engage with staff, including technical personnel, in order to offer guidance and enforce compliance in relation to security policies
• Ability to work off own initiative with minimal supervision
• Must be meticulous, methodical and accurate in the completion of tasks
• Must have a hands-on approach and should not be adverse to learning about new systems, tools and techniques on the fly
• Due to the technical nature of this role, programming or scripting experience is a must. Preferred Skills
• Knowledge of SDLC-related security mechanisms such as Threat Modelling, SAST and DAST will be considered an asset
• Knowledge of networks and firewall configurations will be considered an asset
• Having a background in software development will be considered a plus. Think you've got what it takes? Apply directly to get the conversation started All applications will be treated with strict confidence. Equal Opportunity Statement All applications will be treated with strict confidence.