Information Security Specialist

About the role

The Information Security Specialist will strengthen our security posture by implementing and maintaining governance, risk, and compliance (GRC) frameworks, with a focus on PCI‑DSS and ISO standards.

Key responsibilities

• Implement and maintain PCI‑DSS compliance programs.
• Develop and apply ISO/IEC 27001 and ISO 27002 controls.
• Apply NIST CSF and other security frameworks to assess and improve security.
• Conduct risk assessments and implement appropriate controls.
• Manage security technologies such as SIEM, firewalls, endpoint protection, IAM, vulnerability management, and incident response.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• 3–4 years of hands‑on information security experience, especially in GRC.
• Strong analytical, documentation and communication skills, able to explain security concepts to non‑technical audiences.

Required skills

• PCI‑DSS implementation or compliance experience.
• Knowledge of ISO/IEC 27001, ISO 27002 controls.
• Familiarity with NIST CSF and other security frameworks.
• Risk assessment methodologies and control implementation.
• Experience with SIEM, firewalls, endpoint security, IAM, vulnerability management, incident response.