Digital Security Officer

Job description

About the employer Secure Transactions the employer Secure Transactions, a division of the employer Group, is the leading technology provider making it safer and easier to pay and connect. With unmatched expertise in cryptography and credential issuance, IST is trusted by over 2,000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. Every day, IST secures billions of essential transactions, ensuring the highest levels of data protection and convenience. Job description the employer Group - the employer Group unlocks simpler and safer ways to pay, connect, access, identify, travel and protect public places. With its long-standing expertise in biometrics and cryptography, the employer develops technologies of excellence with an impactful, ethical, and socially responsible approach. Every day, the employer secures billions of interactions in the physical and digital worlds. the employer Secure Transactions, a division of the employer Group, is a leading pure player in payment and connectivity solutions. For decades, we have pioneered the future of our industry, empowering our clients to offer essential services with an unbeatable balance between high-level security and ease of use. With a global team of nearly 10,000 employees, the employer Secure Transactions is trusted by 2,400 customers worldwide. Purpose Within the employer Secure Transactions, we are currently looking for our Digital Product Security Officer for our Digital solution s. You will be part of the Security department. You will be in charge to maintain & improve the level of security of our digital products & services, to make it progressively a core value of our offers to our customers and ensure the security of digital solutions throughout their lifecycle. As a Digital Product Security Officer, you are key stakeholder of the information security of all Digital solutions worldwide (Payment or Connectivity). It is a 360° role, highly visible in the organization, with many interactions with other departments including business, legal, engineering, operations and IT. That position is an opportunity for you to contribute to the improvement of our security practices related to cloud security & agile development (devops) activities within an international context. Key Missions • Work with business / product owners teams, to promote security as a value in our solutions, and engage security discussions with our key customers • Work with the legal department to review and negotiate security-related clauses in contracts with vendors, partners, and customers. • Maintain & improve our digital security processes & standards (Security Assurance Plan, Business Continuity Plan, DevSecOps …) • Monitor & improve security KPI, through close collaboration with product teams • Lead the security committees with our product & services teams (business, engineering and operations) • Conduct the threat models & risk assessment for Digital activities, to share conclusions with business, to ensure proper mitigation & prioritization of these vulnerabilities • Improve the overall level of security empowerment & maturity of the teams by contributing actively to security awareness activities, and by adopting a coaching approach rather than a “doer”. • Assess and manage the security of third-party vendors and partners involved in the development and support of digital products Profile & Other Information • High level of autonomy & adaptability

Requirements

• 7+ experience in information security, including a first experience as security officer in another company
• Very good knowledge & work experience in risk assessment (ex: ISO 27005 framework) and/or Threat Modelling approach
• Experience in definition of security policies & standards
• Solid knowledge of various information security frameworks
• Experience in working in cloud environments
• Excellent problem-solving and analytical skills.
• Demonstrated leadership skills, ability to manage transversely different teams to achieve a common goal.
• Ability to explain risks for business to executive people & give advices about mitigations schemes to reduce risks
• Effective verbal and written communication skills.
• English 100% fluent (written & spoken).

Skills