SPECIALIST, INFORMATION SECURITY

About the Role

As a Business Information Security Specialist, you will support Open Platform Security by coordinating security assurance, compliance, audit, and operational security activities across cloud platforms and related technologies. You will work with platform teams, security specialists, auditors, risk and compliance professionals, and technology stakeholders to help ensure security controls are operating effectively, findings are addressed on time, and audit and certification readiness is maintained. You'll also contribute to continuous improvement through automation, reporting, and responsible use of Artificial Intelligence (AI) capabilities.

Key Responsibilities

• Coordinate security assurance and compliance activities, including PCI DSS, ISO 27001, SOC, GDPR, and other relevant assessments by supporting preparation, evidence collection, control reviews, and remediation follow-up.
• Coordinate penetration-testing activities from planning through remediation, partnering with technology teams and security stakeholders to ensure findings are prioritized, tracked, retested, and resolved within agreed timelines.
• Support operational security activities, including firewall-review processes, security-service requests, ServiceNow queue management, ownership coordination, and documentation maintenance.
• Assess security requirements for projects, technology changes, and new implementations, providing practical recommendations while maintaining policies, standards, procedures, and compliance records.
• Develop reporting, dashboards, and automation solutions using tools such as ServiceNow, Microsoft Azure, Power BI, and responsible AI capabilities to improve visibility, efficiency, and security-assurance processes.

Requirements & Tech Stack

• Relevant experience in information security, security assurance, governance, risk, compliance, audit, or related areas.
• Knowledge of PCI DSS, ISO 27001, security audits, control validation, evidence management, vulnerability remediation, and cloud-security practices.
• Experience using ServiceNow or similar workflow-management tools, along with reporting and visualization solutions such as Power BI.
• Effective communication, stakeholder coordination, documentation, and problem-solving skills, with the ability to collaborate across global and cross-functional teams.
• Ability to take responsibility for assigned work, maintain attention to detail, meet agreed timelines, and contribute to automation and continuous-improvement initiatives.

Preferred Certifications And Skills

• Certifications such as CISA, ISO 27001 Implementer, PCIP, CISSP, CISM, or CCSP.
• Knowledge of cloud-security practices across Microsoft Azure, Amazon Web Services (AWS), or similar cloud environments.
• Experience supporting vulnerability-management programs, penetration-testing governance, compliance activities, or workflow automation initiatives.
• Understanding of responsible AI principles and AI-assisted security operations.