it security & compliance.

about the company
A technology company, specializing in providing comprehensive and innovative payment processing solutions for financial institutions and other organizations.


about the requirements

• Client Reporting: Prepare monthly reports for clients on SLA, uptime, and incidents.
• Patch Management: Ensure timely application of security patches and version upgrades (including certificate renewals) and maintain patch inventory.
• Capacity Management: Monitor and ensure appropriate allocation of hardware resources (CPU/RAM).
• Incident Response: Lead infrastructure team response to security alerts and incidents, provide IR reports to clients and management (including antivirus, FIM, DLP, PAM alerts).
• BCP/DR Exercises: Coordinate bi-annual DR exercises, annual BCP, and restoration drills with relevant teams.
• PCI AOC: Collaborate with PCI-DSS QSA and teams to provide infrastructure evidence, address findings, and update scope documents.
• Control Management: Work with compliance on ensuring the the relevant controls are in place and monitored
• Infrastructure Health Checks: Ensure regular health checks of infrastructure (HSM, network, cloud, OS, certificates) according to SLA and report/escalate issues.
• PCI-DSS Compliance: Ensure strict adherence to PCIDSS operational requirements.
• Policy & Regulatory Compliance: Responsible for complying with company policies, regulatory guidelines, and external authorities.