Esker Hiring! Full Time Information System Security Officer in Federal Territory - Ricebowl

Esker is a worldwide leader in AI-driven process automation software, helping financial and customer service departments digitally transform their source-to-pay (S2P) and order-to-cash (O2C) cycle. Companies use our cloud-based solutions to drive greater efficiency, accuracy, visibility and cost savings throughout their S2P and O2C processes.

POSITION : Information Systems Security Officer

Role Overview:

As part of the security department, you are responsible for information systems security, working closely with the Group CISO.

Job Scopes/Responsibilities:

• Governance, Risk and Compliance Tasks

• Contribute to the management of the ISO 27001-certified ISMS (Steering Committee, Risk Analysis, Indicator Management, Audits, Policy Management)
• Organize organizational audits related to certifications and standards (SSAE 18, HIPAA, SOC 1, SOC 2, ISO 27001)
• Advise on the implementation of solutions to ensure the required level of security
• Raise staff awareness of security challenges within the company
• Monitor regulatory developments to keep abreast of legislative changes
• Support pre-sales consultants with client security questionnaires
• Inform, advise and alert executive management and business departments

• Operational Tasks

• Audit, control and regularly improve the security measures implemented
• Participate in the implementation of security solutions
• Monitor events generated by operational security tools (incidents, Microsoft 365 security alerts, Helpdesk tickets, DarkWeb monitoring, etc.)
• Organize technical audits and monitor identified vulnerabilities (penetration testing, vulnerability scanning)
• Undertake vulnerability monitoring and ensure recommendations are followed up
• Carry out technology watch to keep abreast of developments in the sector's standards
• Assist departments wishing to implement new solutions or renew existing ones

Job Requirements and Qualifications:

The ideal candidate should possess the following qualifications, skills, and competencies:

• Graduate from an engineering school (or equivalent university degree), you have some initial experience in information security (including internships)
• ISO 27001 Lead Implementer training for governance tasks
• Initial experience in the field of information security (including internships)
• Networks, systems, cloud platforms and overall Information Systems security
• Good level of professional English (spoken, read, written) (documentation in English, international stakeholders)
• Languages: Native/Professional fluency in English. French or any other additional language will be an added advantage.