facebook tracking
Security and Compliance Officer

Security and Compliance Officer

About the Role:

If you're brave enough to take payments on, we might just take you on! We’re looking for a Security and Compliance Officer to join our team based in Sydney, where you’ll be working amongst some of the industry’s top innovators, engineers, marketers, user experience designers and system developers. As a community we are regularly confronted with new challenges, so there’s plenty of intriguing tasks to undertake and countless opportunities for personal development. Come push the payments envelope!

The purpose of the Security and Compliance Officer is to lead and manage any security, compliance or audit projects. Working closely with all teams across the business, including: Development, Product, Operations and Sales. You will also have global points of contact across the broader Ingenico Group, as you liaise and interact with your Security and Compliance counterparts

Areas of Responsibility:

  • Assist Architects with the design, documentation and implementation of security processes.
  • Lead, manage and monitor all PCI activities throughout the year, whilst providing regular project/status updates to stakeholders.
  • Complete a gap analysis to highlight and identify all security and compliance gaps, and work with the business to prioritise and close out the risk. This should be done on an ongoing basis.  
  • Educate all areas of the business so they are informed and trained on PCI and what this means.
  • Review and ensure there is a central repository where all relevant policies are in place, up to date, and represent what happens in the business. This is to be maintained on an ongoing basis.  
  • Inform the business as to what we need to be doing proactively from a compliance perspective in order to future proof the business.
  • Be aware of any risks / vulnerabilities / exploits and communicate them to the business in a timely manner where necessary.
  • Assist commercial teams with contract review and RFIs where relevant to security and compliance.
    Advise the business around other areas of compliance and legislation such as Privacy, GDPR and ISO27001.

Behavioural Competencies:

  • Self-motivated and highly professional
  • Proven leadership skills and the ability to take ownership of tasks / projects.
  • Excellent written and verbal communication skills
  • A desire to learn and improve both skills and knowledge
  • Adaptable and flexible to business demands
  • Strong organisational and planning skills
  • Positive ‘can-do’ attitude
    Hungry to be a part of a high performing team that hold one another accountable to achieve results

Knowledge:

  • PCI DSS (Level 1)
  • ISO 27001 or other Security Standards / Compliance
  • Payments Industry
  • Networking, Windows, Linux, Hardening Standards, OWASP.
  • SDLC, CI/CD.
  • ITIL
  • Agile
  • Security technologies such as FIM, IPS/IDS, WAF, SEIM.
  • Relevant legislation such as GDPR and PI

Experience:

  • Minimum 3 years working with PCI DSS, including audits and remediation.
  • Continuous Improvement methodology such as PDCA or retrospectives

Qualifications:

  • Tertiary qualification in either Technology or Business is preferable
  • CISSP

Our Leadership Competencies:

  • ‘Forward Focus’ – Aligning action to strategy
  • ‘Think Customer’ – Maximising customer value
  • ‘Drive’ – Driving execution towards performance
  • ‘Inspire’ – Motivating others to go beyond
  • ‘Team-up’ – Succeeding together
Apply for this job

Or, know someone who would be a perfect fit? Let them know!

Sydney

227 Elizabeth St
2000 Sydney Directions

OUR VALUES: The 4B´s


Be bold

We encourage all employees to make decisions and stand confidently behind them.

Be passionate

We’re excited about the future of our business and the commitment it will take to build it.


Be collaborative

We embrace our partners and work together to find solutions that are beneficial to all.


Be responsible

We accept full responsibility for our role in the world and the actions we inspire.

 

Already working at Bambora?

Let’s recruit together and find your next colleague.

email
@bambora.com
  • Anne McDonnell
  • Aurora Walker
  • Cathrine Damgaard Nielsen
  • Christian Nielsen
  • Christoffer Rutgersson
  • Claes Nyströmer
  • Claire Gayton
  • Corinne Engellau
  • Cyril McEvoy
  • David Woxberg
Teamtailor

Applicant tracking system by Teamtailor