IT Governance, Risk, and Compliance Manager

Stack

Responsibilities

• ▹Define and maintain the information security strategy, standards, and roadmap
• ▹Steer security architecture across a cloud-native environment
• ▹Establish secure SDLC practices and embed automated security controls into CI/CD pipelines
• ▹Define cloud security guardrails (identity, network segmentation, encryption, secrets management)
• ▹Build and run security monitoring, logging, and threat detection
• ▹Lead the security incident response lifecycle and act as incident commander
• ▹Own vulnerability and threat management: scanning, prioritization, remediation tracking
• ▹Plan and coordinate penetration testing and offensive-security exercises
• ▹Govern identity and access management and privileged access
• ▹Oversee data protection controls (encryption, key management, data classification)
• ▹Secure corporate IT and office infrastructure
• ▹Partner with Engineering and DevOps teams on secure practices
• ▹Run security awareness and phishing-resilience programs
• ▹Implement and evidence technical controls for PCI DSS, ISO 27001, and SOC audits

Soft skills

About the company

emerchantpay is a leading global payment service provider and acquirer for online, mobile, in-store, and phone payments, offering global acquiring, local payment methods, and advanced fraud management.