Chief Information Security Officer

Senior Security Professional

We are a leading provider of innovative solutions in the mobile technology space, serving over 1.2 billion consumers worldwide.

In an increasingly digital landscape, our mission is to empower businesses to grow their digital presence and optimize user experiences through cutting-edge technologies and omnichannel marketing strategies.

We work with top-tier clients across various industries, including Telco, Insurance, Education, FMCGs, and Retail, in over 45 countries across Latin America, Africa, the Middle East, and South-East Asia.

As a Senior Security Professional, you will play a pivotal role in driving our security initiatives forward, working closely with our talented network and engineering teams to ensure the highest levels of availability, flexibility, and robustness for our business.

Your primary responsibilities will include:

• Monitoring and responding to security events, managing escalations, and acting as a liaison during security incidents.
• Serving as a dedicated security analyst for critical projects, providing expert guidance and support.
• Leading the vulnerability management lifecycle, overseeing installation and patching efforts to maintain the security posture of our systems.
• Conducting specialized security work, including security audits, penetration testing, evidence collection, and forensic analysis.
• Driving technical tasks forward, pursuing completion within time and technological constraints.
• Contributing to end-user security education and awareness programs.
• Maintaining and updating compliance posture, ensuring security policies and standards remain current and effective.
• Serving as a primary technical resource for security-related client discussions, articulating technical concepts to various audiences.
• Providing essential security content and review for commercial engagements, including RFPs, bids, and client assurances.

Key Requirements:

Networking & Infrastructure

• Excellent knowledge of TCP/IP.
• Comprehensive understanding of the core Linux network stack.

Security Testing Methodologies

• Expert proficiency in essential security disciplines, including network traffic and protocol analysis, comprehensive vulnerability assessment and scanning methodologies, network service enumeration, and hands-on web application penetration testing techniques.

System & Infrastructure Hardening

• Proven experience in developing, implementing, and auditing standardized security baselines, robust configuration management controls, and effective patch management strategies across diverse operating systems and application platforms.

Security Control Systems

• Deep knowledge and hands-on experience with SIEM solutions and vulnerability management platforms.
• Experience implementing and managing IPS systems (Cisco, Checkpoint) and firewalls (Cisco, Checkpoint).
• Proficiency with DLP and endpoint protection solutions, including application control and device control.
• Experience with web application firewalls (WAF).
• Familiarity with products for IDAM (identity and access management).

Data Protection

• Experienced in data encryption technologies and products.

Development

• High-quality Python/shell development experience considered a plus.

Knowledge of Cloud and Mobile Security Architecture

• Knowledge of cloud and mobile security architecture.
• Experience in datacenter protection strategies.

Security Governance

• Demonstrable knowledge of common security standards and compliance frameworks (e.g., ISO 27001, NIST Cybersecurity Framework, SOC 2).
• Practical experience translating technical controls into formal, auditable security policies and procedures.

Formal Documentation

• Proven ability to translate complex security testing results, audits, and posture assessments into high-quality, professional documentation suitable for internal leadership and external client assurance reviews.

Stakeholder Communication

• Solid communication skills (both oral and written), able to explain concepts and ideas to various audiences.
• Proven experience presenting technical security findings and strategy to C-level executives and external clients.

Additional Experience:

• Knowledge of cloud and mobile security architecture and experience in datacenter protection strategies.
• Prior experience in a network position considered a plus.

---