Security Analyst at Electrum

Description
Electrum is an exciting B2B software company that is growing at an exponential rate. Our customers include some of South Africa's biggest household names, and we are looking for you to help us with compliance.

You will join our growing technical operations team and work closely with the professional services and technical teams to develop policies and procedures.

What you will be responsible for:

• Maintaining and updating compliance documents and policies
• Administer and review compliance program and assess system changes in the organization
• Monitor and evaluate existing policies and procedures and help to recommend improvements to the compliance program
• Evaluate all compliance policies and procedures and coordinate with internal teams to resolve compliance issues
• Prepare and coordinate certification and assurance audits
• Record audit findings, support implementation and recommended remedies
• Develop and update existing policies and procedures to align with new compliance programs and frameworks
• Respond to queries from assessors and maintain effective relationships with all business units

What you will do in your first 3 months:

• Audit of existing compliance and create a roadmap of changes
• Gap analysis for new security frameworks and creation of Project Plan
• Assist with the final implementation of POPIA in the organisation

What you will do in your first year:

• Setup compliance process
• Complete implementation of Payment Card Industry Data Security Standard compliance across organization
• Implemented a new compliance software platform
• Completed the ISO 27001 surveillance audit

Requirements

• 3 - 5 years experience with compliance and information security frameworks
• IT related Degree
• Ability to assess and analyse security processes in a systematic way
• Ability to work well independently and within a team
• Ability to develop and maintain good working relationships with co-workers and third parties
• Good oral and written communication skills
• A solid understanding of the regulatory compliance and risk issues that a SaaS company might face
• An aptitude for working in a regulated environment and for building compliance by design

Increase your chances by having:

• Professional certification ISO 27001 lead auditor, Certified Information Security Professional, Cybersecurity Analyst Certification
• Worked for a SaaS company and understands API infrastructure

Benefits

• Team beach getaways
• World class payments training
• Macbook Pro
• Highly competitive games of table tennis
• Showers and Towel Service
• Generous leave policy
• Tons of career growth opportunities
• Family style cooked lunches
• Great coffee
• Friday beer on tap
• Company gym