Information Security Compliance Senior Officer

About the role

The Information Security Compliance Senior Officer will ensure that onebank meets all relevant information security laws, regulations and industry standards, including ISO 27001 and PCI‑DSS. The role supports a positive customer experience by protecting sensitive data and maintaining trust in the digital bank.

Key responsibilities

• Collaborate with internal teams to identify and remediate security gaps or non‑compliance issues.
• Coordinate and facilitate internal and external audits, preparing documentation, evidence and supporting interview processes.
• Prepare and present regular compliance status reports to management and relevant committees.
• Lead cross‑functional projects to implement compliance initiatives, defining scope, deliverables and monitoring progress.
• Conduct regular assessments, gap analyses and third‑party audits to detect non‑compliance.
• Develop and execute remediation plans, providing guidance to stakeholders.
• Stay current with evolving regulations and industry best practices by engaging with regulatory bodies and auditors.

Required profile

• Bachelor’s degree in Information Technology, Computer Science or a related field.
• 5‑7+ years of experience in IT and information security, with a focus on ISO 27001 and PCI‑DSS compliance.
• Relevant certifications such as ISO 27001 Lead Auditor/Implementer, PCI, GRCP, GRCA.
• Experience managing audits, compliance monitoring and risk assessments.

Required skills

• ISO 27001
• PCI‑DSS
• CBE CSF
• Audit management
• Compliance monitoring
• Risk assessment