(Senior) Cyber Engineer – Payment, Customer Domain - Cyber Security

WHO YOU ARE
Do you want to work with the best people in security engineering on a multi-national stage? You now have the chance!
We are now looking for senior or regular cyber engineer to join our customer domain cyber team, focusing on securing IKEAs Payment platform, especially store payments. You will collaborate with other security and tech teams on identifying suspicious activities while improving visibility and implementing payment security best practices. You should be able to translate external requirements towards contextual, applicable, implementable and sustainable changes from a technical and ways of working dimensions for both online payment and store payments.
If this sound interesting, you should continue reading!
As always, we are looking for people to join us who share and are passioned about our IKEA culture and values that are very much a part of our business and day to day work life. You should be genuinely curious about the IKEA business and always strive to understand and contribute to our vision. You always seek the necessary context to take best practices beyond a cliché into sound business practices. You wish to work with the best people in security on a multinational stage.
We expect that you have a minimum of 5 years within payment security and responsible of security monitoring, threat detection, implementing and maintaining security controls. Expert knowledge of External regulation such as
PCI DSS
PSD2
Scheme processing rules and regulation i.e. mastercard, visa, Amex etc.

What you bring to the table:
Ability to translate external requirements towards contextual, applicable, implementable and sustainable changes from a technical and ways of working dimensions for both Card present and Card Not Present
Expert knowledge that is globally applicable
authorization from merchant towards issuers

- Players
- flows and components, including but not limited to
- old school Card present payment with cards
- major and local schemes
- OLV/ELV
- tokenization driven payment methods such as mobile payment
- account to account/per to pear payment blik, swish, Vipps etc.
- direct debit
- financing, installment, reoccurring payment
- Settlement and clearing flows
Assessment, implementation and verification of
Data filed encryption and key management
Communication security such as TLS and its operational implications
Protocol, such as ISO8583, Nexo etc, usage/implementation impact.
Internal/external Stakeholder management on many level
Knowledge of the Secure Software Development Life Cycle (SSDLC)

- Threat Modeling
- Secure code review
- Infrastructure security
- PCI DSS audit
Certification such as CISSP, PCI DSS, or OSCP, or have received other documented trainings in the security field.
WHAT YOU'LL BE DOING DAY TO DAY
You will be joining the Cyber Engineering Team for the Customer Domain.
Our responsibility is to enable and support our engineering teams to systematically work with security and privacy, by operationalizing the IKEA strategy for Security & Privacy By Design. We support the engineering teams by translating security and privacy findings into actionable risks which they can use to make informed and conscious decisions.
As a senior security engineer, you will also be expected to take on a bigger role in the team, by helping to train and guide the younger members, and act as project manager for the team members in bigger development projects which involves the Cyber Domain.
We are a new team within IKEA, and you will have plenty of opportunity to influence the ways of working and help develop best practices. As innovation is a part of the IKEA DNA, we encourage you to think new, and create space for you to bring your own innovative ideas to life.
We work together to achieve our goals and always strive to utilize the talent of every individual optimally. We develop our people and our business equally to ensure that we can continue to provide a better everyday life for the many people for a long time to come. We believe that continuous learning is important to grow, both as persons and as professionals. To empower ourselves to thrive, we're able to attend both trainings and conferences.
QUESTIONS AND SUPPORT? LET'S CONNECT!
Your internal title in the organization will be Senior Cyber Engineer. This position is placed in Malmö, Sweden. The selection process will take place continuously.
For more information about the position, please contact our recruiter Pietro Mattei, Pietro.Mattei@ingka.ikea.com