Site Security Leader

WELCOME TO INGENICO  

Ingenico is the global leader in payments acceptance solutions. As the trusted technology partner for merchants, banks, acquirers, ISVs, payment aggregators and fintech customers our world-class terminals, solutions and services enable the global ecosystem of payments acceptance.

With 40 years of experience, innovation is integral to Ingenico’s approach and culture, inspiring our large and diverse community of experts who anticipate and help shape the evolution of commerce worldwide. At Ingenico, trust and sustainability are at the heart of everything we do.

ABOUT THE ROLE & TEAM

Reporting to the NAR Regional Security Officer (with dotted line reporting to the Solutions Manager in Mexico City), the NAR Site Security Leader - Mexico holds a critical role in the daily secure production, configuration and delivery of Ingenico payment products to the benefit of our customers.

 WHAT YOU’LL DO

The Site Security Leader - Mexico has the following responsibilities:

• Oversee the physical security of the Mexico Operations at all the Mexico manufacturing and repair facilities (including Mexico City, Guadalajara, Monterey & Tijuana).
  • Ensure that physical security measures are in place, active and effective at all times.
  • Coordinate with facilities staff on the evolution of physical security measures at all Mexican sites.
  • Ensure that role-appropriate security training exists for both the indoctrination of new employees and to refresh the knowledge of existing employees.
  • Ensure that logs and CCTV footage for controlled areas within Ingenico's Mexican facilities are available and reviewed as required based Ingenico policies and procedures.

• Function as the Regional Cryptographic Key Administrator for all of the Mexico manufacturing and repair facilities, supporting NAR Injection services.
  • Customize Regional cryptographic key management procedures for use in the Mexican facilities in line with evolving industry standards and Ingenico key management policies.
  • Manage all cryptographic key management systems used in Ingenico's Mexico Key Injections Facilities (KIFs) and Repair Facilities to ensure the secure storage and availability of cryptographic key materials to the NAR production lines, ensuring the proper configuration of products being delivered to Ingenico customers.
  • Responsible for the generation of new cryptographic keys and cryptographic key bundles used for remote key loading.
  • Maintain ongoing day-to-day compliance and support annual external validation of Ingenico Mexico's KIF Operations with PCI PIN, PCI P2PE and other industry regulations as appropriate.
  • Function in the role of Primary Key Administrator, helping to maintaining NAR's cryptographic key database and oversee cryptographic key conveyance ceremonies.
  • Train other Ingenico employees who will be involved in various aspects of key management operations: key custodians, sensitive assets custodians, HSM administrators, etc.
  • Assist the Ingenico Sales Teams in the definition of Key Profiles needed for the fulfillment of sales orders.
• Lead local incident response efforts in the Mexico region as required.

ABOUT YOUR SKILLS

• Possess at least two years of experience performing, or preparing systems for, IT audits and/or security assessments.
• Preferably possess a minimum of 2 years of experience in Cryptographic Key Management and/or Cryptography, including:
  • Symmetric & asymmetric cryptographic techniques including cryptographic algorithms, key establishment, key management, and key lifecycle;
  • Knowledge of industry standards for cryptographic techniques and key management, including but not limited to ANS X9.24, X9.143/TR-31, TR-34, ISO 11568, ISO 13491, PCI PIN and/or PCI P2PE;
  • Hardware security modules (HSMs) operations, policies, and procedures;
  • Physical security techniques for high-security areas; and
  • Point of Interaction (POI) key-injection systems and techniques, including key loading devices (KLDs) and key-management methods, such as Master/Session or Derived Unique Key Per Transaction (DUKPT).
• Preferably possess a minimum of 2 years of experience in implementing and overseeing physical security measures.
• Strong organizational skills, attention to detail, and strict time-management.
• Spanish-English Bilingual.

AAP/EEO Statement:

lngenico provides equal employment opportunity to all individuals regardless of their race, color, creed, religion, gender, age, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by state, federal, or local law. Further, the company takes affirmative action to ensure that applicants are employed and employees are treated during employment without regard to any of these characteristics. Discrimination of any type will not be tolerated.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.