Senior Information Security Officer

About the role

We are looking for a Senior Information Security Officer to join ZainCash’s security team in Iraq. The role will lead the monitoring, detection and response activities that protect our mobile‑wallet platform and its customers.

Key responsibilities

• Monitor systems, networks and applications for security incidents using SIEM and EDR solutions.
• Investigate alerts, contain threats and lead incident response from detection through eradication, producing detailed reports.
• Conduct risk assessments, manage vulnerability remediation and coordinate VAPT programmes.
• Maintain and update security policies, support KPI implementation and ensure compliance with ISO 27001 and NIST standards.
• Perform regular user access reviews and enforce the principle of least privilege.
• Design and deliver security awareness campaigns for staff.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or a related field.
• 2‑5 years of experience in information security operations, SOC or GRC, preferably in fintech, telecom or government.
• Professional certifications such as CISSP, CISM, CEH or GCIH are preferred.
• Fluent in Arabic and English, both written and spoken.

Required skills

• SIEM platforms – Splunk, QRadar or Microsoft Sentinel.
• Endpoint Detection and Response – CrowdStrike or SentinelOne.
• Vulnerability scanning tools – Nessus or Qualys.
• Knowledge of ISO 27001 and NIST security frameworks.