Senior Information Security Officer
Posted Updated
About Zaincash
ZainCash Iraq is a leading mobile wallet in Iraq and recognized as Forbes top Fintech company of 2023 and 2024 as well as GSMA’s Best Mobile Innovation Supporting Humanitarian Situations. The company offers a range of consumer and business services including local and international money transfer, bill payments, companion payment cards, payroll, aid disbursement, and more. For more information, please visit www.zaincash.iq.
Responsibilities
- Security Monitoring: Monitor systems, networks, and applications for security incidents. Actively monitor SIEM logs, EDR alerts, and investigate suspicious activities or potential threats.
- Incident Response: Support incident response and recovery activities, from containment to full eradication. Prepare detailed incident reports and recommend corrective actions.
- Vulnerability & Risk Management: Conduct risk assessments, track vulnerabilities, and oversee Vulnerability Assessment & Penetration Testing (VAPT) activities to ensure timely remediation.
- Governance & Compliance: Maintain and update information security policies and procedures. Support the implementation of security KPIs and ongoing compliance monitoring.
- Access Control: Assist in regular user access reviews and strictly enforce the principle of least privilege across all systems.
- Security Awareness: Develop and execute security awareness initiatives to educate staff on emerging risks and best practices.
Requirements
- Education: Bachelor's degree in Computer Science, Cybersecurity, or IT
- Qualifications: CISSP, CISM, CEH, or GCIH preferred.
- Industry Experience: Enterprise IT Security, SOC, or GRC. Banking/fintech, telecom, or government a plus.
- Years of Experience: 2-5 years in information security operations.
- Technical Skills & Tools: SIEM (Splunk, QRadar, or Sentinel), EDR (CrowdStrike or SentinelOne), vulnerability scanning (Nessus or Qualys), ISO 27001 and NIST.
- Language Proficiency: Fluent Arabic and English, written and spoken.
Skills
As published by workable · 4 questions · 4 written answers
First name, Last name, Email, Headline, Phone, Address, Photo, Education, Experience, Summary, Resume, Cover letter
- As a Senior Information Security Officer, you will be actively monitoring SIEM and EDR systems. Briefly describe a complex security alert you investigated in a previous role. Walk us through your analysis process, how you supported the incident response, and the corrective actions you recommended to prevent recurrence.
- This role requires balancing active monitoring with governance tasks like policy updates, risk assessments, and enforcing the principle of 'least privilege.' How do you prioritize these proactive compliance tasks alongside reactive daily alert monitoring, and how do you ensure end-users understand these security policies?
- What is your current salary (IQD)?
- What is your expected salary (IQD)?