Information Security Analyst

Responsibilities

• Support GRC workstreams including ISO 27001, SOC 2, and PCI DSS compliance and audit readiness.
• Assist in conducting AI risk assessments and operationalizing AI governance frameworks.
• Contribute to the application security programme through secure code review support and vulnerability management.
• Perform technology risk assessments across cloud environments and infrastructure.
• Support data governance activities including data classification, flow mapping, and DLP controls.
• Collaborate with Engineering, Product, Legal, and Compliance teams to embed security requirements into business processes.

Requirements

• 1-2 years of experience in information security, IT audit, or a closely related function.
• Working knowledge of at least one domain: GRC, AppSec, technology risk, or data governance.
• Practical familiarity with compliance frameworks such as PCI DSS, ISO 27001, or SOC 2.
• Experience or exposure to external audits, risk assessments, or security assurance activities.
• Strong written and verbal communication skills with the ability to explain security concepts to diverse audiences.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, CISA (in progress), or ISO 27001 Foundation.
• Familiarity with cloud environments (AWS, Azure, or GCP) from a security perspective.
• Experience with security or GRC tooling like Wiz, Qualys, or ServiceNow GRC.
• Awareness of AI governance frameworks or the OWASP LLM Top 10.
• Basic scripting or automation skills (e.g., Python).

About the Company

Checkout.com is a global fintech leader enabling over 10 billion transactions yearly for more than one billion global shoppers. We power the digital experiences of ambitious businesses like eBay, Spotify, and Uber, providing the scalable infrastructure behind the world's payments.