Cyber security GRC

Shift4 is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit shift4.com.

In this role, you will join our professional services team as a domain expert. You will be responsible for developing and improving Shift4's compliance maturity level and increasing customers' trust in Shift4 products and services.

Responsibilities:

As a Cyber security GRC you will:

Design, implementation and implementation of cyber protection policies in complex computer networks.
Accompanying and implementing the hardening process, writing constitutions in accordance with the protection requirements, standardization, and Best Practices.
Working in coordination with the IT, communication, and application teams, and reviewing and adjusting regulatory requirements for the organization.
Accompanying and certifying the organization to comply with standards in the field of information security and conducting risk assessment surveys.
Gap surveys against various laws, regulations, and standards in the field of information security.
Writing policies and procedures in the field of information security and implementing them.
Performing regular controls on information security issues.

Requirements:

High level English (speaking, reading, and writing).
5 years or more experience in writing policies and procedures in the field of information systems and information security and implementing them in the organization.
Managing and leading certification for PCI-DSS information systems and information security standards.
Full control of IT infrastructure in Windows Linux environments including Active directory, operating systems, server hardware, communication components, virtualization, cyber protection systems.
Control of communication systems including switches, routers, and FW.

You have a major advantage if:

QSA certification.
Certifications and relevant courses such as ISO Lead Auditor, CISO, CISSP, CISM, CISA.
Managing and leading certification for information systems and information security standards: ISO-27001, SOX-ITGC.