Information Security Specialist

Job Requirements: Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, or a related field. 3–4 years of experience in information security, with a strong focus on GRC. Hands-on PCI-DSS implementation or compliance experience (strongly preferred). Good knowledge of ISO/IEC 27001 and ISO 27002 controls and best practices; implementation experience is a plus. Familiarity with NIST CSF and other recognized security frameworks. Practical experience with risk assessment methodologies and control implementation. Solid understanding of security technologies, including SIEM, firewalls, endpoint security, IAM, vulnerability management, and incident response. Awareness of current cyber threats, attack techniques, and Indicators of Compromise (IoCs). Strong analytical, documentation, and communication skills, with the ability to explain security topics clearly to non-technical audiences. Nice to Have: PCI-DSS certifications or training (e.g., PCI ISA, PCIP). ISO 27001 Lead Implementer or Lead Auditor. Other certifications such as CISA, CRISC, CompTIA Security+, CySA+, or SSCP. Experience in banking, fintech, payments, or other regulated sectors. Show more Show less