NARANJA X
“ For us , people come first , and they are at the centre of our decisions . We strive to offer them products , benefits , and services that make their daily life easier ”
SANTIAGO FERNÁNDEZ CISO , NARANJA X
general public . We know security education is essential .
“ The second pillar implies reducing threat exposure levels by using a proactive approach . Process automation and attack area reduction are key .
“ The third and last is about the adequate protection of sensitive corporate data by adding further protective layers around our most critical asset : information .”
Secure and agile teams Naranga X also employs specific tactics in terms of its business modelling . Currently , the fintech utilises an element called ‘ Security Champions ’ and a work style it describes as ‘ Tribal Squad ’. These systems are employed to improve efficiency as well as security within the company .
In May 2020 , Naranja X announced its evolution into a fintech company . Interdisciplinary work has been crucial to this success , as has the creation of “ Squads ” or teams , with different specialists from areas such as IT , analytics , customer experience , and business .
Fernández explains , “ At Naranja X , products and business opportunities are created and developed with different technologies by interdisciplinary teams called Squads or Tribes . We believe in empowering teams to achieve the aims we have set . Creating an agile mindset erases physical barriers and allows us to work virtually , building true teams and focusing on results .
“ To accompany the time to market each product , it is necessary to perform a ” Shift to the left ” in terms of security . That is , Information Security must work from the very beginning at each of the stages in the product life cycle . So , we are part of each of our pipelines ( CI / CD ) of development and infrastructure ( IaaC ) as their security support ,” explains .
He says that as resources are finite , to achieve scalability , the role of Security Champion was created in each Squad . The Security Champion is a member of the interdisciplinary team ( Product Squad ) who is in charge of overseeing security stories in the team ’ s backlog . The Security Champion is also well trained in cyber security and liaises with Cyber Security CoE .
fintechmagazine . com 159