Jobs at Unified Payment Services Limited

Job Description

• The Head of Systems Control & Physical Security Access is responsible for developing and implementing comprehensive security strategies to protect physical assets and systems within the organization.
• This role involves conducting risk assessments to identify vulnerabilities, creating and enforcing security policies, and managing the daily operations of physical security measures, including access control and surveillance. Collaboration with internal departments and external partners is essential to integrate security protocols effectively.
• Additionally, the position includes overseeing incident response efforts, promoting staff training on security awareness, and continuously improving security practices to adapt to emerging threats.
• Ultimately, the objective is to ensure a safe environment that safeguards personnel and assets from unauthorized access and other physical security risks.

Duties & Responsibilities

• Developing and implementing security strategies for physical security and access control systems to protect organizational assets.
• Conducting risk assessments to identify vulnerabilities in physical security measures and recommending enhancements.
• Managing access control systems to ensure that only authorized personnel can access sensitive areas.
• Overseeing the installation and maintenance of surveillance systems and other physical security technologies.
• Leading incident response efforts related to physical security breaches, including investigations and reporting.
• Creating and enforcing security policies and procedures regarding physical access and systems control.
• Training staff on security protocols to foster a culture of security awareness within the organization.
• Collaborating with internal departments (e.g., IT, facilities management) to integrate security measures into operations effectively.
• Monitoring and analyzing security incidents to identify trends and improve response strategies.
• Staying updated on industry trends and advancements in physical security technologies to enhance the organization's security posture.

Requirements
Education:

• Bachelor’s Degree in Computer Science, Information Security, or related field.

Experience:

• 7 years of minimum experience as Head, Systems Control & Physical Security Access, disaster recovery, risk management, or a similar role in a security operations environment.

Technical Skills:

• Skill in assessing security controls based on cybersecurity principles and tenets (e.g., CIS CSC, NIST SP 800-53, Cyber Security Framework, etc.), knowledge of Personally Identifiable Information (PII) data security standards.
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, OAuth, OpenID, SAML, SPML).
• Skill in developing and applying security system access controls. Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, and non-repudiation).
• Skill in evaluating the adequacy of security designs. Skill in assessing security systems designs.
• Skill in recognizing vulnerabilities in security systems (e.g., vulnerability and compliance scanning). Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

go to method of application »

Job Description

• The Head of Governance Risk is responsible for establishing and maintaining a comprehensive governance framework that ensures compliance with cybersecurity standards and certifications across the organization.
• This role involves developing risk management strategies, overseeing the implementation of cybersecurity frameworks, and ensuring that all security policies align with regulatory requirements.
• The Head will collaborate with various stakeholders to promote a culture of risk awareness and compliance while leading efforts to achieve and maintain relevant cybersecurity certifications.
• Additionally, this position includes continuous monitoring of the organization's security posture and adapting governance practices to address emerging threats and evolving regulatory landscapes.

Duties & Responsibilities

• Develop and implement a comprehensive governance framework for cybersecurity that aligns with organizational objectives.
• Oversee the organization’s compliance with relevant cybersecurity regulations and standards (e.g., ISO 27001, ISO 20000, ISO 22301, PCIDSS, PCIPIN, PCICVP, PCI3DS, NDPC).
• Conduct risk assessments to identify vulnerabilities and recommend appropriate mitigation strategies.
• Lead efforts to achieve and maintain cybersecurity certifications, ensuring all processes meet the required standards.
• Collaborate with internal departments to integrate governance practices into operational processes effectively.
• Develop training programs to enhance staff awareness of governance policies, risk management practices, and compliance requirements.
• Monitor industry trends and advancements in cybersecurity frameworks to continuously improve governance strategies.
• Prepare reports for senior management on the status of governance initiatives, risks, and compliance efforts.
• Facilitate audits and assessments related to governance and compliance, addressing any identified gaps or deficiencies.
• Engage with external partners and regulatory bodies to stay informed about changes in cybersecurity regulations and best practices.

Requirements
Education: 

• Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, or a related field.

General Experience:

• Candidates should have a minimum of 7 years of experience in governance, risk management, or compliance within the cybersecurity domain.
• Certifications Key certifications include Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC), which validates expertise in governance, risk management, and compliance

go to method of application »

Job Description

• Cloud Infrastructure Engineer designs, implements, and maintains the cloud-based infrastructure that supports an organization's computing needs.
• This role involves working with cloud platforms (like AWS, Azure, and Google Cloud), deploying scalable and secure infrastructure, and ensuring high availability and performance.
• Typically, they report to the company’s Chief Information Security Officer (CISO).

Duties and Responsibilities

• Design and implement cloud architecture to meet business and technical requirements, ensuring scalability, security, and cost-effectiveness.
• Use orchestration tools like Kubernetes to automate containerized application deployment and management on the cloud. Implement cloud security best practices, such as identity and access management (IAM), encryption, firewalls, and monitoring for compliance with security policies.
• Provide technical support to development teams in deploying, managing, and scaling cloud-based applications.
• Collaborate with developers and IT teams to plan, deploy, and manage cloud resources such as virtual machines, networks, and storage.
• Develop and implement automation scripts using tools such as Terraform for efficient deployment and management of cloud resources.
• Conduct regular security assessments and vulnerability testing to identify and mitigate risks within the cloud infrastructure.
• Work closely with software developers and other stakeholders to integrate infrastructure with applications and service.

Requirements

• Education: Bachelor’s Degree in Computer Science, Information Security, or related field.
• Certifications Relevant certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert etc.
• Experience: 4-6 years of experience as a system administrator, network engineer, Devops engineer, cloud engineer, or a similar role in a security operations environment.

Technical Skills:

• Expertise in setting up and managing EC2 (Elastic Compute Cloud) instances, S3 (Simple Storage Service) for data storage, VPC (Virtual Private Cloud) for networking, RDS (Relational Database Service), and other core services.
• Expertise in writing configuration files, managing state files, and using Terraform modules for reusability across environments.
• Experience in creating, deploying, and managing containerized applications.
• This includes writing Dockerfiles, working with container registries like Docker Hub, and managing container images.
• Proficiency in Python, Bash or Powershell for automating cloud infrastructure tasks.
• Knowledge of Jenkins for continuous integration/continuous delivery pipelines, enabling the automation of code deployments to cloud environments, is required. Proficiency with RDS (AWS), Azure SQL Database, Cloud SQL (GCP), and NoSQL databases like DynamoDB (AWS), CosmosDB (Azure), and Firestore (GCP) for managing cloud-based databases.
• Proficiency in orchestrating containerized applications using Kubernetes, including deploying, scaling, and managing clusters.