Hey there, great that you found our job description for Information Security Officer.

We are looking for a curious and conscientious person to drive our information security and compliance related topics, such as PCI, and the overall information security posture at Enfuce.

The Information Security Officer is going to be a part of our Platform & Infrastructure team which is the foundation of our operations making sure we are able to run and grow our business. If you are deeply passionate about information security and consider yourself a great facilitator, you might be the person we are looking for. 

ABOUT ENFUCE 

We are Finland’s biggest fintech startup and an award-winning innovative service provider operating from the cloud. We are at the forefront in the Payment Industry and enable players in the Payment Industry to partner up fast and reliably. We are the first in the world PCI-DSS certified company to run a fully fledged issuing and acquiring platform in a public cloud. All of our services are designed for security, compliance, and scalability. As follows, the Information Security Officer is a key role in the company as they have a crucial role in using the PCI standard to drive business value beyond a pure compliance angle.

WHAT IS THE ROLE ALL ABOUT?

At Enfuce, the Information Security Officer is part of the team that provides the underlying AWS and Oracle environments where our products are hosted. As a cloud native organisation, we strive to cutting edge technology and solutions while at the same time ensuring compliance, security and operational excellence.

The key purpose of the Information Security Officer is to implement appropriate information security controls relevant to the applicable business risk. Moreover, the Information Security Officer will have close relationships with all of the business areas as all members of Enfuce’s staff need information security awareness.

Your responsibilities include:

• Ensuring Enfuce’s continuous compliance PCI standards (PCI-DSS and PCI-3DS)
• Project manage the yearly PCI-x re-certification projects, including vendor management for the QSA
• Owning and implementing information security awareness campaigns across Enfuce
• Owning (documenting, updating, and promoting) relevant policies and procedures
• Coordinating activities related to penetration testing 
• Owning and developing Enfuce’s operations within information security 

What you’ll need:

• Knowledge of the PCI standard
• Solid working knowledge of information security and risk management principles. Past experience from standards such as ISO-27001 considered as a plus
• Project Management skills
• Hands-on attitude and ability to execute while keeping the big picture in mind
• Excellent English language and presentation skills to be able to communicate with different stakeholders in an international company 
• Inquisitiveness and curiosity
• To be eager to take responsibility for your part in the Enfuce journey
• Essentially, the Information Security Officer will have the overall ownership of the overall security topics and vendor relationships.

At Enfuce we can offer you:

• Utilizing the latest technologies in AWS and cloud native tooling
• Working in an agile environment where the teams are free to make technical decisions and decide what technology best works to solve the problem at hand
• Plenty of room for personal growth within information security as well as within the company
• Along with salary and other perks & benefits, we offer ESOP - incentives to share the success

Our culture and leadership can be summed up as focused on ownership, responsibility and solution orientation. This is a permanent position located at either our Espoo or Mariehamn Offices, or remotely if you are located elsewhere in Europe.

HOW TO APPLY?

If you feel you've got the attitude needed for the opportunity, we would absolutely love to hear from you! 

Just click "Apply for this job" and leave your information - we'll contact you!