Information Security Officer

About the role

RS2 is looking for an Information Security Officer to lead and evolve its security strategy, protecting data, systems and processes across a global payments platform. The role will also embed security into the Software Development Lifecycle using a DevSecOps approach.

Key responsibilities

• Integrate security mechanisms throughout the SDLC, applying DevSecOps principles.
• Conduct technical code reviews and analyse software architecture for security weaknesses.
• Perform internal information security audits, risk assessments, penetration testing and vulnerability scans.
• Maintain compliance with PCI DSS, PCI SSF and ISO 27001/2 certifications.
• Develop, document and update security policies, processes and best practices.
• Deliver security awareness and secure coding training across the organisation.
• Monitor security alerts, investigate incidents and contribute to their resolution.

Required profile

• Bachelor’s degree in ICT or a recognised security certification (e.g., CISSP).
• Minimum of 2 years experience in an information security role.
• Hands‑on experience with penetration testing, ethical hacking and secure software design.
• Ability to work independently, be meticulous and engage technical staff on compliance matters.

Required skills

• Knowledge of PCI DSS, PCI SSF and ISO 27001/2 standards.
• Familiarity with OWASP security frameworks and secure coding principles.
• Experience with SAST, DAST, threat modelling and other SDLC security tools.
• Proficiency in programming or scripting languages for security testing.
• Understanding of network and firewall configurations.