What is your mission?

You will provide the best service to our partner brands by performing these tasks:

• Lead the planning, execution, and maintenance of compliance initiatives for PCI DSS, SOC 2, and HIPAA.

• Maintain and update the Risk Registry with current threats, vulnerabilities, and remediation status.

• Develop and monitor risk mitigation plans in coordination with the Infrastructure, DevOps, and Helpdesk teams.

• Coordinate and support internal and external security audits and assessments.

• Maintain all security-related documentation, including:

  • Information Security Policies and Procedures

  • Data Flow Diagrams and Network Diagrams

  • System Hardening Guides

• Own the Knowledgebase repository for IT Security and Compliance, ensuring all stakeholders have access to updated and well-documented procedures.

• Ensure documentation is version-controlled and aligned with audit requirements.

• Oversee and report on the implementation of security controls, incident responses, and compliance status.

• Develop and execute Security Awareness Training programs for internal staff.

• Conduct refresher sessions related to data handling, access management, and incident reporting.

• Assist with Vulnerability Assessment and Penetration Testing (VAPT) projects.

• Support the IT onboarding/offboarding compliance process for employees and contractors.

Who are we looking for?

• Bachelor's Degree in Information Technology, Computer Science, or a related field.

• At least 3 to 5 years of experience in IT Security or Compliance.

• Preferred Certifications:

  • CISA, CISM, CISSP, CRISC

  • ISO 27001 Lead Implementer/Auditor or similar.

• Strong knowledge of PCI DSS, SOC 2 Type II, HIPAA, and other applicable security frameworks.

• Experience in managing security documentation and audit processes.

• Proficiency in compliance management tools, such as:

  • Vanta, Drata, Confluence, Jira, etc.

• Strong analytical, organizational, and communication skills.

• Excellent interpersonal skills with the ability to work with cross-functional teams.