Risk, Compliance & Information Security Executive

About the role

We are seeking a Risk, Compliance & Information Security Executive to protect our e‑commerce software products and ensure compliance with key regulations. You will lead penetration testing, vulnerability assessments, and manage certification processes such as PCI DSS and ISO 27001.

Key responsibilities

• Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes.
• Plan and coordinate internal and external penetration tests, and follow up on remediation.
• Perform regular vulnerability assessments using tools such as Nessus and Qualys.
• Conduct risk assessments, prepare corrective action plans, and use SIEM and GRC tools for monitoring and reporting.
• Prepare for audits, manage documentation, and raise awareness on compliance and security best practices.

Required profile

• Solid understanding of PCI DSS and ISO 27001 frameworks.
• Hands‑on experience with vulnerability scanning tools and SIEM platforms.
• Strong documentation, audit preparation, and analytical skills.
• Proficiency in written and spoken English.

Required skills

• PCI DSS
• ISO 27001
• Nessus
• Qualys
• SIEM platforms
• GRC tools