Access rights management specialist in NovaPay

NovaPay Financial Company (GC "Nova") announces a competition for the position< /p>

"Access rights management specialist"

Requirements:

• Higher education in the field of information security, cyber protection
• Experience with access to information systems - from the 1st year.
• Understanding the principles of control systems access, including authentication and authorization technologies
• Knowledge of requirements related to the preservation, protection and processing of information, including relevant laws, standards and policies
• Understanding of modern information security technologies, including deployment and setting up access control systems, data encryption, virtual private networks (VPN), etc.
• Knowledge of information security monitoring procedures and the ability to effectively respond to security incidents
• A confident user of MS Office, the ability to work with systems: PCI DSS, DSTU ISO/IEC 2700X, IdM, IAM, IGA. Knowledge of programs: Scrooge, iTiny, CTS

Basic tasks:

• Management of access rights to the Company's information systems, such as: ABS Scrooge, SDO iTiny
• Building access control models in other information systems
• Monitoring of existing access rights in the Company's information systems
• Analysis of risks in the management of access rights to information systems
• Monitoring of changes in the Company's information systems and analysis of the probability of the impact of these changes on the appearance of additional risks (detection of new risks / detection of an increase in indicators of existing risks, timely informing management and taking measures regarding risks)
• Formation and maintenance of the risk register in the management of access rights to information systems
• Processing of incidents / probable incidents of information security
• Processing requests regarding user access rights in the Service Desk system.
• Help with cryptography
• Consulting users of information systems - employees of the Company
• li>
• Working with Department documents, regular (twice a year) updating of information security documents
• Monitoring changes in information security legislation
• Participation in the preparation of training materials for staff Companies on information security and raising the general level of knowledge in the field of cyber security

We offer:

• work in an innovative company in the FinTech segment
• possibility to work in a hybrid format or remotely< /li>
• care for your mental and physical health (health insurance, psychological consultations, corporate sports communities)
• education and development (English language classes, courses, etcand trainings for professional growth)
• annual salary revisions according to own performance
• meetings with famous speakers in the Corporate Club
• mentoring program and support for each new employee
• opportunity to show their talents (we value creative initiative and we support it)