company logo

Payment Security Auditor

Gurgaon
Contract
Senior: 5 to 10 years
Posted on Jan 24 2025

Not Accepting Applications

About the Job

Skills

Payment Security auditing or Cybersecurity auditing (Internal Audit)
Networking, Identity and Access Management, Active Directory, Cloud, Windows or Linux
IPS/IDS, WAF, SIEM/SOC, Nessus, Qualys, Wireshark, Metasploit
PCI- QSA, PCI-QPA, PCIP, CRISC or CISSP
MITRE Attack framework
OWASP top 10

The purpose of this role is to deliver the Technology Audits, assist in the identification of Payment Technology and Cyber Risks and to test key Technology controls. You will support the planning, execution and reporting of a small simultaneous portfolio of Audit activity as set out in the Audit Charter and the annual Audit Plan.

What you will bring: · Experience in Payment Security auditing or Cybersecurity auditing (Internal Audit) is required. · Technology/security experience working in large organizations. Prior experience in the delivery of audits across Financial Services would be highly advantageous. · Strong Networking, Identity and Access Management, Active Directory, Cloud, Windows or Linux skills. Familiarity with the MITRE Attack framework and knowledge of common security vulnerabilities, threats and controls (e.g. OWASP Top 10) · Scripting language understanding is an advantage (Python, Bash, Powershell, etc.) · Industry recognized Security or Payment certifications such as PCI- QSA, PCI-QPA, PCIP, CRISC or CISSP are highly preferred. · Degree or tertiary education in technology or related field is required. · Experience knowledge of security tools like IPS/IDS, WAF, SIEM/SOC, Nessus, Qualys, Wireshark, Metasploit, etc. · Knowledge of security best practices, HSM, payment technologies. · A growth mindset, a strong track record in assurance/risk/controls and a solid set of core skills and competencies around stakeholder management, communication, and time management.Your key accountabilities will include: · Plan and deliver Cybersecurity and Payment Technology audits covering Security Operations, Security Testing, Emerging technologies, Security Architecture, and Platform infrastructure, etc. · Efficient delivery and documentation of quality audit workpapers in the systems of record, including walkthroughs, control identification, control design assessments and control operating effectiveness testing. · Ability to build strong working relationships with internal and external stakeholders across different levels of the organisation. · Efficient verification of audit raised issues within internal SLA targets once the business indicate issues are complete, supported by quality workpapers. · Provide timely feedback and coaching to colleagues to promote a performance and development culture. · Plan and project manage delivery of audits within agreed resource and time budgets. · Draft succinct and clear audit assignment plans that reflect agreed scope.

· Form effective working relationships with business contacts during audits and escalate delivery problems where they cannot be directly solved. This role focuses on delivering payment technology Audits, identifying payment technology and cyber risks, and testing key technology controls. You will plan, execute, and report on a small portfolio of concurrent audits, aligned with the audit charter and annual audit plan.

About the company

Epergne Solutions is a leading IT solution provider with niche, comprehensive and leading-edge capabilities in mobility, analytics and web solutions. Our primary focus is to be a trusted partner and strategic technology adviser to our clients. We aim at having long term and fruitful associations with our clients based on trust, genuine interest and understanding of client's busines ...Show More

Industry

IT Services and IT Consul...

Company Size

11-50 Employees

Headquarter

Singapore, Singapore

Other open jobs from Epergne Solutions