Technical Experience :

• Technology Auditor

• Technical SME for Technology architecture, DevSecOps principles, CI/CD pipelines , APIs
• A deep understanding of IT risks and controls, particularly in DevSecOps principles, CI/CD pipelines (and the relevant tools e.g. Jenkins, GitLab, APIs and Microservices
• Architectural assessments, therefore, knowledge of Technology Architecture best practices will be an added advantage
• Experience within Audit or Risk Management / Assurance.

• Cybersecurity Auditor

• Cyber Security SME - Penetration Test, Vulnerability Assessment, Security Monitoring etc.
• Information security experience in any one of the areas including Security operations, Offensive security, Defensive security, Security architecture or Security engineering
• Experience working with CrowdStrike, Splunk, Qualys, Defender ATP, Proxy, Endpoint Detection & Response tools, SIEM and Mail Gateways
• Scripting language understanding is a must (Python, Bash, PowerShell, etc.)

• Payment Security Auditor

• Strong understanding of Payment flows
• Experience knowledge of security tools like IPS/IDS, WAF, SIEM/SOC, Nessus, Qualys, Wireshark, Metasploit, etc.
• Knowledge of security best practices, HSM, payment technologies.