Security Engineer (SecDevOps)

Our client is the world’s leading b2b neobank, publicly listed on the Australian Securities and Frankfurt Stock Exchange (ASX : ISX). Their services include eMoney, payments and identity verification, which all revolve around optimizing the online payment journey in a seamless and secure way.

They are looking for a Security Engineer (SecDevOps). The successful candidate should have previous experience with Security Governance and Risk Management and at least 3 years in an Information/Cyber Security role.

• Review system configurations to identify security gaps against Security Policies.
• Play a key role and collaborate with DevOps to design and implement fit-for-purpose security solutions, following security best practices.
• Review/Audit of security controls to ensure their applicability of design and operational effectiveness.
• Authoring of good quality documentation to support business process and procedures.
• First line of response, and working closely with DevOps and CSO, for security incidents, including co-ordination and subsequent post-incident cleanup and investigation activities.
• Assist in the process and completion of all audit activity (ISO, PCI, and other possible financial regulatory requirements).
• Operation and maintenance of corporate security tools, including native cloud tools.
• Further, develop the operational capability of the Chief Security Office and educate end-users in security best practices.

• At least 3 years in an Information/Cyber Security role.
• Knowledge of information security frameworks, domains and principles, for examples CIS Critical Controls, ISO27001/2, ISF, NIST, etc.
• Industry security certifications are preferred – Security+, SANS GIAC, CISSP, ISACA Certs, etc.
• Previous experience with Security Governance and Risk Management.
• Experience in the finance/banking sector would an advantage, but not necessary.