We’re on a mission to create a global payment ecosystem that connects businesses and consumers everywhere.
IT Governance, Risk, and Compliance Manager
Location
Bulgaria
Posted
9 days ago
Salary
0
Seniority
Lead
Job Description
IT Governance, Risk, and Compliance Manager
emerchantpay
• Define and maintain the information security strategy, standards, and roadmap, aligned to applicable regulations, rules, and security best practices. • Steer security architecture across a cloud-native environment, defining secure-by-design patterns for microservices, APIs, and shared platform services. • Establish and govern secure software development lifecycle (secure SDLC) practices, embedding automated security controls into CI/CD pipelines. • Define and drive adoption of cloud security guardrails - identity, network segmentation, encryption, secrets management, and configuration baselines. • Build and run security monitoring, logging, and threat detection across cloud, infrastructure, and application layers. • Lead the security incident response lifecycle - preparation, detection, containment, eradication, recovery, and post-incident review - and act as incident commander for security events. • Own vulnerability and threat management: scanning, risk-based prioritization, remediation tracking, and reporting across infrastructure, containers, and application code. • Plan and coordinate penetration testing and offensive-security exercises (in-house or co-sourced) and drive findings to closure. • Govern identity and access management, privileged access, and least-privilege principles across cloud and corporate systems. • Define and oversee data protection controls - encryption, key management, data classification, and loss prevention - for sensitive and cardholder data. • Secure corporate IT and office infrastructure, including endpoints, networks, and productivity and collaboration platforms. • Partner with Engineering and DevOps teams to make the secure path the easy path, providing tooling, standards, threat modelling, and design reviews. • Provide security input into architecture and change decisions, including the adoption of new technologies and third-party services. • Run security awareness and phishing-resilience programs for technical and non-technical staff. • Implement and evidence the technical security controls underpinning PCI DSS, ISO 27001, and SOC audits. • Monitor the evolving threat landscape and emerging security technologies. • Act as a key member of the internal security center of excellence and contribute to cross-functional security working groups. • Build, lead, and mentor a small security team. • Report security posture, key risks, and metrics.
Job Requirements
- Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
- At least 10 years in information / cyber security, including a minimum of 2-3 years in a leadership role, with hands-on experience securing cloud-native environments at scale.
- Deep, practical public-cloud security knowledge (AWS strongly preferred): identity, networking, encryption, logging, and configuration management.
- Strong experience securing DevOps / CI/CD pipelines and modern microservices architectures - containers, APIs, and infrastructure-as-code.
- Working knowledge of application security and secure SDLC across modern programming languages and web frameworks.
- Hands-on experience with security operations, incident response, and vulnerability management.
- Solid understanding of security frameworks and compliance standards relevant to payments: ISO 27001, PCI DSS, SOC 2, and NIST CSF.
- Working AI security literacy, with hands-on use of AI-assisted security tooling (e.g., GenAI coding assistants, AI-augmented SAST/DAST and SIEM/SOC analytics) and a practical understanding of securing AI/LLM and agentic applications, including AWS AI services such as Amazon Bedrock and the OWASP Top 10 risks for LLMs (e.g., prompt injection and data leakage).
- Strong analytical and problem-solving ability, with high integrity and sound judgement.
- Excellent verbal and written communication skills, fluent English, and the ability to influence engineers with data, logic, and best practices.
Benefits
- Fast-growing payment company;
- Excellent working conditions, casual atmosphere, and state-of-the-art hardware;
- Modern, challenging, constantly growing business;
- Professional development - books, trainings, certifications, etc.;
- Team buildings and fun activities;
- 25 days paid holiday, 1 day for every 2 years with us;
- Fully distributed and remote.
Related Guides
Related Categories
Related Job Pages
More IT Support Jobs
IT Helpdesk Specialist
Burjline BuildersTransform your vision into reality with our expert construction solutions.
• Providing exceptional customer service and support to employees regarding hardware, software, and network issues. • Diagnosing and resolving technical problems via phone, email, and in-person interactions. • Assisting with the setup, configuration, and maintenance of computer systems and peripherals. • Documenting and tracking support requests in our ticketing system to ensure timely resolution and follow-up. • Collaborating with IT team members to identify and implement improvements in processes and systems. • Conducting training sessions for employees on new software and technology tools. • Staying updated on the latest technology trends and best practices to enhance service delivery. • Participating in IT projects and initiatives as needed.
Role Description The ideal candidate is a proactive and independent IT professional who can manage their ticket queue from start to finish with minimal supervision. They will act as a reliable point of contact for employees, providing timely support, resolving escalated issues, and maintaining clear communication throughout the process. This role requires strong technical skills with Mac and/or Windows environments, hands-on experience with Microsoft 365, Azure AD/Entra ID, and Intune, as well as proficiency in using ticketing systems. The candidate should be capable of producing regular reports and ensuring a smooth and efficient support experience for end users. Key Responsibilities - Independently manage an assigned ticket queue from intake through closure, ensuring SLAs are consistently met - Provide L2 technical support for hardware, software, Microsoft 365, network connectivity, identity, and productivity tools - Troubleshoot and administer Microsoft 365 services including Exchange Online, Teams, SharePoint, OneDrive, and Intune - Support Azure AD / Entra ID for identity and device management - Administer and troubleshoot Active Directory and Windows Server environments, including user/group management, GPOs, and basic server issues - Provide support for macOS and Apple devices, including configuration, MDM enrollment, and end-user troubleshooting - Document all cases clearly and accurately within the company's ticketing platform (ServiceNow, Jira, Zendesk, or similar) - Produce weekly support reports summarizing ticket volume, recurring issues, SLAs, and queue updates - Proactively follow up with end users on open tickets and ensure timely resolution - Identify recurring problems and recommend improvements in processes, documentation, or configuration - Maintain and update internal knowledge base articles and end-user documentation - Collaborate closely with US-based IT leadership on escalations and larger IT initiatives Qualifications - Minimum of 3 years of IT Helpdesk/Technical Support experience, with clear demonstrable experience operating at L2 capacity - Proven track record of owning a personal ticket queue, following up independently with end users, and producing regular reporting without prompting - Strong, professional English communication skills — both written and verbal. Must be comfortable working directly with US-based end users and stakeholders - Reliable availability for a full nightshift schedule aligned to US Pacific Time - Hands-on administration experience with Microsoft 365, Azure AD / Entra ID, and Intune - Solid working knowledge of Active Directory and Windows Server (user/group admin, GPOs, DNS/DHCP basics, troubleshooting), PowerShell, Linux - Practical support experience with macOS and Apple hardware in a business environment - Hands-on experience with at least one enterprise ticketing platform: ServiceNow, Jira Service Management, or Helpdesk applications - Strong troubleshooting methodology, ownership mindset, and ability to work with minimal supervision - Stable home internet connection and a suitable work-from-home setup Preferred Qualifications - Relevant certifications such as CompTIA A+/Network+, Microsoft 365 Certified: Modern Desktop Administrator, Azure Administrator Associate, or Apple Certified Support Professional - Experience supporting a US-based media, publishing, or events company - Exposure to basic networking (VPN, Wi-Fi, firewalls) and endpoint security tools - Experience building dashboards or reports from ticketing system data
Role Description IT Support Engineer Location: Kerala, India (Remote) Qualifications - Bachelor's Degree in Computer Science, Information Technology, Computer Applications, or related field. - Relevant certifications such as CompTIA A+, Network+, Microsoft, Cisco, or ITIL are preferred. Requirements - 2+ years of experience in IT Support, Desktop Support, or Help Desk roles. - Experience supporting enterprise users in a corporate environment is preferred. - Strong troubleshooting and analytical abilities. - Excellent verbal and written communication skills. - Customer-focused approach and problem-solving mindset. - Ability to prioritize tasks and work under pressure. - Team player with strong interpersonal skills. Company Description
Role Description IT Support Engineer Location: Kerala, India (Remote) Qualifications - Bachelor's Degree in Computer Science, Information Technology, Computer Applications, or related field. - Relevant certifications such as CompTIA A+, Network+, Microsoft, Cisco, or ITIL are preferred. Requirements - 2+ years of experience in IT Support, Desktop Support, or Help Desk roles. - Experience supporting enterprise users in a corporate environment is preferred. - Strong troubleshooting and analytical abilities. - Excellent verbal and written communication skills. - Customer-focused approach and problem-solving mindset. - Ability to prioritize tasks and work under pressure. - Team player with strong interpersonal skills. Technical Skills - Windows 10/11 and Windows Server administration. - Microsoft 365 Administration (Outlook, Teams, OneDrive, SharePoint). - Active Directory and Group Policy Management. - Networking fundamentals (TCP/IP, DNS, DHCP, VPN). - Hardware troubleshooting and system maintenance. - Remote desktop support tools. - Antivirus and endpoint security solutions. - IT ticketing systems such as ServiceNow, Jira Service Management, or Freshservice. Preferred Qualifications - Experience with cloud platforms such as Microsoft Azure or AWS. - Knowledge of cybersecurity best practices. - Experience with IT asset management and endpoint management tools.
