Information System Security Officer

Esker is a worldwide leader in AI-driven process automation software, helping financial and customer service departments digitally transform their source-to-pay (S2P) and order-to-cash (O2C) cycle. Companies use our cloud-based solutions to drive greater efficiency, accuracy, visibility and cost savings throughout their S2P and O2C processes.

POSITION : Information Systems Security Officer

Role Overview:

As part of the security department, you are responsible for information systems security, working closely with the Group CISO.

Job Scopes/Responsibilities:

1. Governance, Risk and Compliance Tasks

•Contribute to the management of the ISO 27001-certified ISMS (Steering Committee, Risk Analysis, Indicator Management, Audits, Policy Management)

•Organize organizational audits related to certifications and standards (SSAE 18, HIPAA, SOC 1, SOC 2, ISO 27001)

•Advise on the implementation of solutions to ensure the required level of security

•Raise staff awareness of security challenges within the company

•Monitor regulatory developments to keep abreast of legislative changes

•Support pre-sales consultants with client security questionnaires

•Inform, advise and alert executive management and business departments

1. Operational Tasks

•Audit, control and regularly improve the security measures implemented

•Participate in the implementation of security solutions

•Monitor events generated by operational security tools (incidents, Microsoft 365 security alerts, Helpdesk tickets, DarkWeb monitoring, etc.)

•Organize technical audits and monitor identified vulnerabilities (penetration testing, vulnerability scanning)

•Undertake vulnerability monitoring and ensure recommendations are followed up

•Carry out technology watch to keep abreast of developments in the sector's standards

•Assist departments wishing to implement new solutions or renew existing ones

Job Requirements and Qualifications:

The ideal candidate should possess the following qualifications, skills, and competencies:

•Graduate from an engineering school (or equivalent university degree), you have some initial experience in information security (including internships)

•ISO 27001 Lead Implementer training for governance tasks

•Initial experience in the field of information security (including internships)

•Networks, systems, cloud platforms and overall Information Systems security

•Good level of professional English (spoken, read, written) (documentation in English, international stakeholders)

•Languages: Native/Professional fluency in English. French or any other additional language will be an added advantage.