emagine · Portugal ·
A senior consultant embedded in a fintech company's Security Department (reporting to the CISO), designing a segmented AWS multi-account architecture, hardening identity and CI/CD security, and leading PCI DSS v4.0.1 and ISO 27001 compliance for an online payments platform operating in West Africa.
Summary: The role of the Senior Cybersecurity Consultant is to enhance the Security Department of a Fintech company through expert knowledge in technical security and governance, ensuring compliance with crucial standards like PCI DSS and ISO 27001, especially in the context of their online payment platform operating in West Africa.
Responsibilities:
Design a secure AWS multi-account architecture with strict segmentation for the Cardholder Data Environment (CDE).
Harden identity management and manage AWS security posture with tools like GuardDuty and Security Hub.
Integrate security into software development processes, including CI/CD security measures.
Lead the compliance efforts for PCI DSS and ISO 27001, including audits and maintaining security policies.
Establish governance practices and clarify roles across departments to enhance the organizational security maturity.
Develop an AI usage policy and oversee AI security practices within the company.
Key Requirements:
Master’s degree in Computer Science, Cybersecurity or equivalent.
Minimum of 10 years in information-systems security with at least 5 years in AWS environments.
Extensive knowledge of PCI DSS v4.0.1 compliance and experience in regulated environments.
Proven consultation experience in security-focused roles.
Bilingual proficiency in French and English.
Nice to Have:
Experience in the WAEMU/UEMOA region or understanding of the BCEAO framework.
Advanced certifications such as CISSP or AWS Certified Security - Specialty.
Familiarity with AI security frameworks and regulations.
Other Details:
Reporting Line: Directly to the CISO in the Security Department.