Information Security Risk & Compliance Analyst
Full Time лв.50,000 - лв.55,000 / yearJob Overview
Reward Gateway|Edenred is a leading digital platform for services and payments for people at work, connecting 52 million users and 2 million partner merchants in 45 countries via over 1 million corporate clients.
At Reward Gateway, we understand that Compliance and Security are paramount to our success, reflected in the culture by providing a high level of assurance to our customers. An opportunity has become available for an InfoSec Risk & Compliance professional to support our Governance, Risk & Compliance, and Information Security operations and be part of a growing business.
What you'll be doing:
- Support our control framework covering ISO 27001, SOC2 Type II, PCI DSS, Cyber Essentials Plus and (in the future) ISO 9001
- Ensure ISO readiness/compliance by conducting/supporting periodic internal audits and participating in hosting ISO registrar audits
- Assist with analysis, documentation and remediation actions for detected audit observations
- Verify implementation and effectiveness of the corrective/preventative actions
- Support the Head of GRC and process owners in developing, documenting, reviewing, and communicating company processes and procedures to incorporate best practices in Quality Management and Information Security Management
- Maintain the compliance automation platform for achieving streamlined compliance activities
- Support the Director of Information Security and Risk Owners with the risk management process
Skills, experience and knowledge you will have:
- At least 1+ year of experience working in Information Security Compliance/Internal Audit
- Experience with at least one compliance framework (e.g., ISO 27001, ISO 9001, ISO 22301, SOC 2 Type II, PCI DSS).
- Understanding of information security concepts and technology
- Previous exposure to cloud technologies and cloud security will be beneficial
- Experience in Document Management (incl. Good Documentation Practices) and procedure review
- Excellent English communication skills
- Comfortable with working across multiple projects, geographical locations, and assignments at once
- Have a risk-based approach to problem-solving