Senior Information Security Officer

About Zaincash ZainCash Iraq is a leading mobile wallet in Iraq and recognized as Forbes top Fintech company of 2023 and 2024 as well as GSMA’s Best Mobile Innovation Supporting Humanitarian Situations. The company offers a range of consumer and business services including local and international money transfer, bill payments, companion payment cards, payroll, aid disbursement, and more. For more information, please visit www.zaincash.iq. Responsibilities Security Monitoring: Monitor systems, networks, and applications for security incidents. Actively monitor SIEM logs, EDR alerts, and investigate suspicious activities or potential threats. Incident Response: Support incident response and recovery activities, from containment to full eradication. Prepare detailed incident reports and recommend corrective actions. Vulnerability & Risk Management: Conduct risk assessments, track vulnerabilities, and oversee Vulnerability Assessment & Penetration Testing (VAPT) activities to ensure timely remediation. Governance & Compliance: Maintain and update information security policies and procedures. Support the implementation of security KPIs and ongoing compliance monitoring. Access Control: Assist in regular user access reviews and strictly enforce the principle of least privilege across all systems. Security Awareness: Develop and execute security awareness initiatives to educate staff on emerging risks and best practices. Education: Bachelor's degree in Computer Science, Cybersecurity, or IT Qualifications: CISSP, CISM, CEH, or GCIH preferred. Industry Experience: Enterprise IT Security, SOC, or GRC. Banking/fintech, telecom, or government a plus. Years of Experience: 2-5 years in information security operations. Technical Skills & Tools: SIEM (Splunk, QRadar, or Sentinel), EDR (CrowdStrike or SentinelOne), vulnerability scanning (Nessus or Qualys), ISO 27001 and NIST. Language Proficiency: Fluent Arabic and English, written and spoken.