27 ene
Clip
Xico
**Who we are?
**
Payclip is changing the way payments work in Mexico!
We are empowering people to exchange value directly from a mobile device.
Clip enables anyone to accept card payments, at any time, and anywhere by turning your smartphone or tablet into a card terminal.
We're a well-funded quickly growing FinTech startup.
We are the leaders in our market and are accelerating to extend our lead and move into new markets.
**The Role**:
We are looking for a **Cyber Governance Senior Manager** to be part of this amazing fintech.
The Cyber Governance Senior Manager will lead the team responsible for establishing and maintaining the company's cyber governance strategy, by managing the cyber security framework (nist, iso),
maintaining and improving the policies, procedures, and processes used, manage the cyber risk methodology, cyber security compliance 8 including PCI DSS), awareness strategy and regular cyber auditing program, to ensure that Clip's information assets are secure and protected.
The Cyber Governance Senior Manager will work closely with leaders throughout the company to help ensure they understand and are following the established information security strategy, policies and procedures.
She/He will also work closely with the architecture, Infrastructure, DevOps, Cyber Protection and IT teams to establish and verify information security compliance.
The Cyber Governance Senior Manager will lead the yearly PCI DSS compliance certification process.
He/she will work with the appropriate teams throughout the year to ensure that required internal and external audits are performed.
She/He will manage a small team to help in all their duties.
**What will I be doing?
**
- Manage Cyber Governance strategy to improve NIST and ISO maturity levels
- Make,
approve and ensure security policies compliance all over the company,
- Manage the cyber Risk strategy.
- Maintain the Cyber Risk matrix to keep all risks under the thresholds and do continuous assessments.
- Maintain PCI DSS continuous compliance and manage the annual certification audit.
- Perform periodic Cyber Security auditings to ensure company compliance and user recertification.
- Manage third party cyber assessments to ensure partners cyber maturity levels..
- Provide cyber security awareness and phishing training and mentoring constantly improve company cyber security maturity levels
- Manage small team to accomplish their goals
- Data privacy, information classification and treatment strategy management
- 5+ years of experience managing security teams, working with PCI DSS certifications, NIST and ISO implementations.
- 3+ years of experience with cyber risk assessment and management projects
- 3+ years managing full company classification and treatment projects
- PCI DSS level 1 compliance management (PCI DSS, PCI PIN).
- Cyber risk management.
- Cybersecurity management of projects, technologies, vendors, and policies, ISO 27002.
- cyber security framework management ( NIST, ISO, SOX).
- Data and privacy Security policies and strategies ISO 27701.
- General knowledge on vulnerability, threat protection and devsecops management.
- Security awareness strategy based on industry recognized standard and frameworks SANS, ISO 27001.
- Experience in cyber protection, threat intelligence, hacking, devsecops and zero trust
In Clip, we are committed to a diverse and inclusive workplace.
Clip does not discriminate under any basis of origin, gender, gender identity, sexual orientation, race, disability, age or other legal status.
Clip is an equal opportunity employer.
If you are unstoppable, creative and have the skills we need, we want to hear from you!
LI-ANL
LI-REMOTE
Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.