Payment Security auditing or Cybersecurity auditing (Internal Audit), Networking, Identity and Access Management, Active Directory, Cloud, Windows or Linux, IPS/IDS, WAF, SIEM/SOC, Nessus, Qualys, Wireshark, Metasploit, PCIQSA, PCI-QPA, PCIP, CRISC or CISSP, MITRE Attack framework, OWASP top 10,. The purpose of this role is to deliver the Technology Audits, assist in the identification of Payment Technology and Cyber Risks and to test key Technology controls. You will support the planning, execution and reporting of a small simultaneous portfolio of Audit activity as set out in the Audit Charter and the annual Audit Plan.
What you will bring:Experience in Payment Security auditing or Cybersecurity auditing (Internal Audit) is required. Technology/security experience working in large organizations. Prior experience in the delivery of audits across Financial Services would be highly advantageous. Strong Networking, Identity and Access Management, Active Directory, Cloud, Windows or Linux skills. Familiarity with the MITRE Attack framework and knowledge of common security vulnerabilities, threats and controls (e.g. OWASP Top 10) Scripting language understanding is an advantage (Python, Bash, Powershell, etc.) Industry recognized Security or Payment certifications such as PCIQSA, PCI-QPA, PCIP, CRISC or CISSP are highly preferred. Degree or tertiary education in technology or related field is required. Experience knowledge of security tools like IPS/IDS, WAF, SIEM/SOC, Nessus, Qualys, Wireshark, Metasploit, etc. Knowledge of security best practices, HSM, payment technologies. A growth mindset, a strong track record in assurance/risk/controls and a solid set of core skills and competencies around stakeholder management, communication, and time management.Your key accountabilities will include:Plan and deliver Cybersecurity and Payment Technology audits covering Security Operations, Security Testing, Emerging technologies, Security Architecture, and Platform infrastructure, etc. Efficient delivery and documentation of quality audit workpapers in the systems of record, including walkthroughs, control identification, control design assessments and control operating effectiveness testing. Ability to build strong working relationships with internal and external stakeholders across different levels of the organisation. Efficient verification of audit raised issues within internal SLA targets once the business indicate issues are complete, supported by quality workpapers. Provide timely feedback and coaching to colleagues to promote a performance and development culture. Plan and project manage delivery of audits within agreed resource and time budgets. Draft succinct and clear audit assignment plans that reflect agreed scope.
Form effective working relationships with business contacts during audits and escalate delivery problems where they cannot be directly solved. This role focuses on delivering payment technology Audits, identifying payment technology and cyber risks, and testing key technology controls. You will plan, execute, and report on a small portfolio of concurrent audits, aligned with the audit charter and annual audit plan