Information Security Officer

About Flitt

Flitt is a fintech company and a member of the TBC Group, offering businesses an international online payments platform. With advanced technology, Flitt provides a simple and secure end-to-end payment management service, integrating various payment methods into one platform for seamless integration. 

What we are looking for:

• Higher technical education or specialized courses in information security
• 3+ years of experience in cybersecurity / SOC / Incident Response / Security Operations or related roles
• PCI DSS assessment experience
• Practical experience with SIEM, EDR, IDS/IPS, WAF: AWS tools, Microsoft tools, Splunk, QRadar, Wazuh, Bitdefender, Carbon, Snyk or similar
• Experience configuring correlation rules, notifications, and dashboards
• Understanding of network protocols, Windows/Linux, Active Directory / Entra ID, cloud, and on-prem infrastructure
• Knowledge of modern attack methods and the MITRE ATT&CK framework, OWASP
• Linux OS basics

What you'll do:

• Develop and enforce security policies, procedures and guidelines to protect company data and infrastructure
• Ensure compliance with PCIDSS standards and regulations for online payments and international transactions.
• Conduct security risk assessments and implement mitigation strategies to evaluate and prioritize those risks and suggest security controls that can mitigate the risks
• Lead investigations into security incidents and implement preventive measures based on findings
• Develop and deliver security awareness training to promote best practices across the organization
• Manage security audits and assessments, particularly for relationships involving sensitive information
• Implement and oversee technology solutions to detect and respond to security threats
• Collaborate with tech, legal and other teams to ensure alignment with business objectives
• Serve as the primary contact for security-related inquiries from customers, partners and regulators
• Stay current on security trends and technologies, continuously improving the company’s security posture.