Key tasks:
Writing and maintaining up-to-date Information Security Management System (ISMS) documentation;
Participating in information security incident investigations;
Conducting internal information security audits;
Supporting third-party penetration tests, supervisory audits, and certification processes;
Managing access to company and/or customer systems (if necessary);
Developing and delivering information security training;
Implementing information security risk mitigation measures;
Implementing new information security standards;
Ensuring GDPR and privacy compliance (updating policies, conducting DPIAs, and data mapping);
Managing third-party privacy risks and Data Processing Agreements (DPAs);
Handling data breach protocols and Data Subject Access Requests (DSARs).
Core Competencies:
Knowledge and understanding of network infrastructure;
Understanding of Information Security Management System (ISMS) principles;
Experience administering Active Directory-based domains;
Knowledge of virtualization systems (e.g., VMware, Hyper-V);
Knowledge of Linux-based servers (Ubuntu);
Knowledge and understanding of PCI DSS, ISO 27001, and GDPR standards and compliance requirements;
Practical knowledge of Data Protection principles (DPIA, data mapping, DPAs);
Experience in developing regulatory and procedural documentation (concepts, policies, regulations, provisions, instructions, etc.);
Knowledge of risk analysis methods, organizational and technical measures for information protection, as well as related technologies, software, and hardware tools;
Knowledge and ability to apply best practices in the field of information security and data privacy;
At least 1 year of professional experience in information security or data protection;
English proficiency at B2 level.
We offer:
Stable salary;
Convenient work schedule: Monday to Friday, 9:00 AM — 6:00 PM;
Comfortable working conditions: cozy office or remote work (subject to stable internet and electricity availability);
Opportunities for growth and development in a dynamic company.