Senior Information Security Officer

About Zaincash

ZainCash Iraq is a leading mobile wallet in Iraq and recognized as Forbes top fintech company of 2023 and 2024 as well as GSMA’s best mobile innovation supporting humanitarian situations. The company offers a range of consumer and business services including local and international money transfer, bill payments, companion payment cards, payroll, aid disbursement, and more.

Responsibilities

Security monitoring: Monitor systems, networks, and applications for security incidents. Actively monitor SIEM logs, EDR alerts, and investigate suspicious activities or potential threats.

Incident response: Support incident response and recovery activities, from containment to full eradication. Prepare detailed incident reports and recommend corrective actions.

Vulnerability & risk management: Conduct risk assessments, track vulnerabilities, and oversee vulnerability assessment and penetration testing (VAPT) activities to ensure timely remediation.

Governance & compliance: Maintain and update information security policies and procedures. Support the implementation of security KPIs and ongoing compliance monitoring.

Access control: Assist in regular user access reviews and strictly enforce the principle of least privilege across all systems.

Security awareness: Develop and execute security awareness initiatives to educate staff on emerging risks and best practices.

Requirements

Education: Bachelor's degree in computer science, cybersecurity, or IT.

Qualifications: CISSP, CISM, CEH, or GCIH preferred.

Industry experience: Enterprise IT security, SOC, or GRC. Banking/fintech, telecom, or government a plus.

Years of experience: 2-5 years in information security operations.

Technical skills & tools: SIEM (Splunk, QRadar, or Sentinel), EDR (CrowdStrike or SentinelOne), vulnerability scanning (Nessus or Qualys), ISO 27001 and NIST.

Language proficiency: Fluent Arabic and English, written and spoken.