KEY RESPONSIBILITIES & ACCOUNTABILITIES OF THE POSITION

• Risk Assessment and Management
  • Ensure implementation of all Board Integrated Risk Management Committee initiatives.
  • Identify and assess the risks in company business processes and operations.
  • Ensure Risk Management related policies and procedures are reviewed and updated.
  • Conduct departmental Risk Assessments.
• Maintaining Compliance Standards
  • Ensure that the company maintains compliance standards including ISO, PCI DSS and WebTrust standards.
  • Be the contact person for applicable Acts, regulations, and policies, and suggest process enhancements and or control changes ensuring compliance standards.
  • Ensure that all business units and departments follow compliance requirements.
• Policy review and development
  • Develop and enforce policies and procedures related to company compliance standards.
  • Ensure employees are updated with compliance requirements and best practices.
• Data Protection
  • Develop data protection strategies and implementation of same ensuring compliance with data protection laws and regulations.
  • Conduct regular data protection impact assessments.
  • Identify and mitigate data protection risks within the organization.

REQUIRED QUALIFICATIONS AND WORK EXPERIENCE:

• An IT, statistics or accounting related degree or equivalent professional qualification from a recognized institution.
• Formal certification in one or more information security related disciplines such as CISSP, CISA, CISM, CRISC and GIAC.
• Having a professional qualification in risk and compliance would be an added advantage.
• Minimum 8 years of experience in the field of IT out of which at least 3 years in information / cyber security or risk and compliance.
• Experience and knowledge in governance frameworks and standards such as ISO/IEC 27001, PCI-DSS, NIST etc.
• Have a good understanding on payment systems processes, including card payment systems, on-line payments, QR based payments and etc.

The above position offers an attractive remuneration package and benefits commensurate with industry standards. The selected candidate can look forward to prospects for career growth in a rapidly growing and stable company.

LankaPay is an equal opportunity employer and is committed to diversity, equity, and inclusion in the workplace. We welcome and encourage applications from all qualified individuals as our final selections will be based solely on merit.

Please send your CV including names and contact details of 2 non-related referees within 07 days of this advertisement to the careers@lankapay.net. Applicants should state the post applied in the subject field.

(While we value all applications received, only short-listed candidates will be called for interviews.)