Cloud Security Officer

We are looking for Cloud Security Officer to join our team!

Quipu is the dedicated IT company of the ProCredit group and provides comprehensive end-to-end solutions for all ProCredit institutions, as well as for other banks and financial institutions This includes everything from electronic payment services to software systems, hybrid cloud hosting, and a host of other operations.

A 100% subsidiary of ProCredit Holding, Quipu was established in March 2004 and is headquartered in Frankfurt am Main, Germany. Quipu plays a central role within the ProCredit group, providing a comprehensive range of support services that enable the banks to become competitive and efficient.

The Cloud Security Officer is responsible for designing and overseeing the building and configuration of enterprise cloud environment controls and security solutions. The Cloud Security Officer reports to Head of Information Security and Risk Management Department. summary.

Key responsibilities

• Investigate and analyze existing cloud structures and create new and enhanced security methods that will enhance the security of cloud-based environments;

• Collaborate with Engineering and Software Development teams to incorporate strong security controls, apply security best practices in the development life cycle, and mitigate security vulnerabilities;

• Manage and execute technologies and processes that affect assigned global Information Protection capability, such as issue identification and resolution, documentation, integration with other tools, gap resolution, gap assessment, and continuous improvement of the capability;

• Counsel project teams, application owners, and other Information Security teams on information security controls;

• Develop security criteria, procedures, and policies;

• Prepare and conduct internal security audits against internal and international security standards;

• Analyse security best practices and trends and provide appropriate recommendations;

• Work with stakeholders across the business to communicate the state of cloud security and risk;

• Manage relationships with vendors and external security partners to ensure alignment with company’s security goals;

• Define, implement, and maintain policies and procedures related to cloud security compliance, including PCI DSS, ISO27001, GDPR, etc.

What we offer:

• A substantial degree of flexibility, allowing for an autonomous approach to performing duties

• Challenging and varied work

• Flat management structure

• Long-term prospects with plenty of opportunities for development and growth

• Excellent team-oriented and international working environment

• Travel possibilities

• Hybrid model of working