Security Engineer

Manoris is a team of professionals helping companies around the world implement innovative digital solutions. We develop end-to-end IT solutions tailored to our clients’ unique business needs, including financial institutions, startups, e-commerce platforms, and companies across various industries, with a strong focus on security, compliance, scalability, and user experience.

Our solutions help businesses improve efficiency and gain a competitive advantage. At Manoris, we focus on the metrics that matter to every merchant: approval rates, uptime, and payment conversion.

Our team consists of 50+ professionals, including a CTO, Engineering Manager, Team Leads, Tech Leads, Backend and Frontend Engineers, QA Engineers, DevOps Engineers, Product Owners, Project Managers, UI/UX Designers, and a Technical Writer.

The main goal of the team is to collect financial data, process it, and build the logic and systems needed to work with it.

We’re looking for an Information Security Manager to take ownership of key information security and compliance processes across the company.

In this role, you’ll work closely with technical and business teams, coordinate PCI DSS activities, manage security risks, and help ensure that our security practices stay effective, scalable, and audit-ready.

Key responsibilities:
🔹 Own and continuously improve information security policies, standards, and procedures, including regular annual reviews.
🔹 Lead regular risk reviews with process owners, assess security risks, and track mitigation plans through completion.
🔹 Coordinate annual PCI DSS certification activities, including confirmation and maintenance of the CDE scope.
🔹 Manage penetration testing, ASV scans, and segmentation testing — from planning and vendor communication to environment access and follow-up.
🔹 Coordinate regular access reviews and ensure access control processes remain consistent and compliant.
🔹 Build and maintain the company’s security awareness program, including onboarding materials, recurring training, and awareness activities.
🔹 Maintain the compliance calendar and ensure quarterly and annual security activities are completed on time.
🔹 Support external audits and certifications by coordinating documentation, evidence collection, and communication with relevant teams.

Our ideal candidate has:
🔸 3+ years of experience as a Compliance Manager, GRC Specialist, Information Security Officer, or in a similar security/compliance role.
🔸 Strong practical knowledge of PCI DSS v4.0.
🔸 Good understanding of at least one information security framework, such as ISO 27001 or NIST CSF, as well as core ISMS principles.
🔸 Hands-on experience developing and maintaining information security policies and procedures.
🔸 Practical experience with risk assessment methodologies and risk register management.
🔸 Experience preparing for external audits, certifications, and working with audit evidence.
🔸 Understanding of incident response processes and experience participating in security incident handling.
🔸 Strong analytical skills, attention to detail, and confidence working with documentation.
🔸 Ability to communicate effectively with both technical and business stakeholders and drive initiatives forward without direct authority.

Nice to have:
🔹 Experience in FinTech, payments, or banking.
🔹 Hands-on experience supporting PCI DSS audits from the company side or previous experience in a QSA company.
🔹 Relevant certifications such as CISA, CISM, ISO 27001 Lead Implementer/Auditor, PCI ISA, or CompTIA Security+.

Hiring process
1. Recruiter Interview (45 minutes)
2. Technical Interview (90 minutes)
3. Reference Check
4. Offer

We create an environment where our specialists can work comfortably, achieve their goals, and enjoy what they do:
🔸 24 days of paid vacation.
🔸 Full support for your Ukrainian private entrepreneur (FOP) setup and accounting, including tax payments.
🔸 Corporate meal allowance.
🔸 Parking reimbursement.
🔸 Smartass fitness training sessions.
🔸 Corporate parties, team-building events, and stylish company merch.
🔸 Social benefits allowance.
🔸 Corporate football.

Benefits Café:
🔹 English language course reimbursement.
🔹 Sports and fitness reimbursement.
🔹 Training and conference reimbursement.
🔹 Premium medical insurance.

If you’re looking for a place where you can grow professionally, contribute to the development of a progressive product, and become part of a strong and ambitious team, send us your CV 🙌🏼

Відгукнутись на вакансію