Risk, Compliance & Application Security Executive

About the role

We are seeking a Risk, Compliance & Application Security Executive to protect Ticimax’s e‑commerce platforms. The role will lead security testing, vulnerability management and ensure compliance with PCI DSS and ISO 27001 standards.

Key responsibilities

• Manage PCI DSS Service Provider Level 1 compliance and ISO 27001 certification processes.
• Plan, execute and follow‑up internal and external penetration tests.
• Conduct regular vulnerability assessments using tools such as Nessus and Qualys.
• Perform risk assessments, develop corrective action plans and track remediation.
• Utilise SIEM and GRC platforms for continuous monitoring, reporting and audit preparation.
• Maintain documentation, audit evidence and compliance dashboards.
• Raise awareness and provide guidance on security and compliance best practices across the organization.

Required profile

• Strong knowledge of PCI DSS and ISO 27001 frameworks.
• Hands‑on experience with vulnerability scanning and penetration‑test coordination.
• Ability to analyse security findings and propose technical and organisational controls.
• Excellent written and verbal English communication skills.

Required skills

• PCI DSS
• ISO 27001
• Nessus
• Qualys
• SIEM platforms
• GRC tools