Senior Information Security Engineer

<p><strong>About Volt</strong></p> <p>When Volt launched in 2019, we recognised how open banking has the power to transform how businesses, wherever they happen to be, receive payments from their customers. So, we set about building an open payments gateway that enables merchants across the globe to receive direct, account-to-account payments – in real time.</p><p>Now, on the back of a record-breaking $23.5 million Series A funding round, we’re building an all-star team to achieve our goal of ‘real-time payments everywhere’.</p><p><br/></p> <p><strong>About the role</strong></p><p>As an Information Security Officer you will play a crucial role in providing technical expertise, guidance and consultancy connected to security. Working with Volt will give you the opportunity to support our development teams and build the culture of security at Volt. You will support the design of a global and exponentially scalable payments transaction platform while going through the full team building and international growth journey with us. We will count on your expertise in systems design, architecture and compliance.</p><p><br/></p><p><strong>About our tech choices</strong></p> <p>We are designing our solutions with Domain-Driven Design principles in mind. That led us among other things to use the hexagonal architecture as our base pattern for the business layers of our apps. The systems as a whole are built with the best practices of microservices architecture, including CQRS, language-agnostic protocols, containerization, etc. Above all, we are keeping the balance between novelty and delivering a business value since that is the ultimate goal of our tech stack.</p><p><br/></p><p><strong>Key responsibilities</strong></p> <ul> <li>Designing, implementing and maintaining technical security infrastructure in line with principles of security architecture derived from applicable regulatory standards, as well as industry best practices,</li> <li>Ensuring compliance and integration of security architecture within the assumed IT architecture model (cloud) and assuring its appropriate functioning,</li> <li>Monitoring and reporting the general state of IT infrastructure in security area according to established metrics,</li> <li>Identifying, managing and reporting security incidents according to required standards and regulations,</li> <li>Designing and evaluating infosecurity / cybersecurity solutions and risk controls for Volt’s products, applications and systems,</li> <li>Conducting reviews of current security measures and recommending, implementing or supervising the implementation of necessary changes and improvements,</li> <li>Performing or supervising regular and ad-hoc security tests,</li> <li>Managing BCP/DRP related activities,</li> <li>Assessing new business initiatives and supporting development activities in regards to processes and technologies used from an information- and cybersecurity perspective,</li> <li>Conducting 3rd party vendor assessments in accordance with applicable regulations, policies and procedures,</li> <li>Working closely with Risk &amp; Compliance, Legal and Operations teams, as well as supporting other departments as needed in the area of information security, cybersec and general protective measures to safeguard data, systems and other assets of the Company,</li> <li>Participating in internal and external audits and acting as the main contact for IT security matters</li> </ul><p><strong>Requirements</strong></p><ul> <li>You have 5-6 years of experience in designing a corporate security architecture,</li> <li>You have hands-on experience working with cloud computing (AWS),</li> <li>You have experience in implementing ISMS or performing information security audits in accordance with ISO 2700x standards,</li> <li>You possess a solid understanding of applicable law in the area of information security for the financial sector (PSD2/RTS), data protection regulations (GDPR), norms, standards (ISO 2700x series, NIST, COBIT, ITIL etc.) and practices in the area of security processes and operations,</li> <li>You are able to demonstrate vast knowledge of technologies focused on cloud security,</li> <li>You are a communicative person committed to the performance of entrusted duties,</li> <li>You possess extensive knowledge of tools and IT security systems i.a. SIEM-SOAR, IAM, PAM, WAF, NGFW, DAM, DR, SOC, VMS, AV, ATP, CTI, EDR, Web/Mail Gateway, DevSecOps, Cloud Security, ServiceNow, AWS,</li> <li>You are familiar with OWASP Top 10, MITRE ATT&amp;CK, CIS, CAIQ,</li> <li>You are fluent in English in speech and writing.</li> </ul> <p><strong>Nice to have:</strong></p><ul> <li>Prior experience with fintech companies and familiarity with financial institutions are more than welcome,</li> <li>Experience and willingness to become a leader is a plus.</li> </ul><p><strong>Benefits</strong></p><ul> <li>In 2021, we secured $23.5 million in Series A funding – a record in the open banking space. We’re going places – f