Cyber Risk & Compliance Analyst

Company Description

At Xplor, we believe that helping people make the most of each day is the most rewarding way to spend ours.

We give small and medium-sized businesses cloud-based, intuitive technology solutions that enable them to manage all the hassles of running and growing a business, so business owners can get back to doing what they love. With Xplor Pay, we help businesses get paid quickly and securely – without hidden fees. We built the tech ourselves, and our platform delivers secure, transparent, fast, and accurate payments.

We are unified by our purpose of helping people to succeed. So, when you become part of our team, you also become part of the personal connection that strengthens the relationship people have with Xplor products.

Job Description

Reporting into our Director of Cyber Risk & Compliance, you'll contribute to the security and compliance of our platforms and applications. The role contributes to our policy, processes, frameworks, compliance obligations and business resilience work. Some of the responsibilities you'll have are:

• Contribution to, and maintenance of, our security policies, standards, controls and processes that protect the confidentiality, integrity and availability of information.
• Implementation of controls that map to compliance frameworks such as NIST, PCI DSS, SOC2, SOX, GDPR and ISO 27001.
• Empower our people to be security assets - our first line of defense against the threats to our information security
• Mitigate the business loss arising from security issues by understanding security risk, monitoring control effectiveness and reporting
• Measurement of Key Risk Indicators aligned to our security controls
• Contribute to the global security strategy, security standards, enterprise security architecture, roadmap of security initiatives in alignment with group strategy, business unit strategies and business plans
• Participate in the deployment of security initiatives across the Group
• Supporting security management with trusted advice and guidance on security aspects across process, service and technology design
• Contributing to overall security administration, security risk management and resilience oversight
• Facilitate collaboration with technical functions and manage relationships with external auditors
• Aid in the development and maintenance of on-going security awareness programs

Essential Responsibilities:

• Contribution to, and maintenance of, our security policies, standards, controls and processes that protect the confidentiality, integrity and availability of information.
• Implementation of controls that map to compliance frameworks such as NIST, PCI DSS, SOC2, ISO 27001, SOX and GDPR.
• Empower our people to be security assets - our first line of defence against the threats to our information security
• Mitigate the business loss arising from security issues by understanding security risk, monitoring control effectiveness and reporting
• Measurement of Key Risk Indicators aligned to our security controls
• Building visual dashboards to convey security risk information
• Contribute to the global security strategy, security standards, enterprise security architecture, roadmap of security initiatives in alignment with group strategy, business unit strategies and business plans
• Participate in the deployment of security initiatives across the Group
• Supporting regional security management with trusted advice and guidance on security aspects across process, service and technology design
• Contributing to overall security administration, security risk management and resilience oversight

Qualifications

• 3-5 years' experience in Security, IT or compliance
• Strong desire to learn new skills and figure out how things work
• Familiarity leading compliance audits
• Familiar with Compliance standards, especially PCIDSS
• Familiarity with Power BI and structuring data for reporting
• Proficiency with Microsoft Excel
• Critical thinking of the status quo
• Proactive, self-motivated learner with a strong drive to achieve personal goals
• Ability to work with remote teams (local, regional and international)
• Comprehension of data analysis
• Strong at written communications and data visualization
• Proactive, self-motivated learner with a strong drive to achieve personal goals
• Motivated by a fast-growing environment where you will have to constantly adapt - no two days are the same!
• You’re a true team player who knows that we all have to sometimes roll up our sleeves
• You align with our four core values and you’re simply a good human