Information security engineer in Konditerskaya korporaciya «ROShEN»

Main responsibilities:

• Monitoring the operation of security systems
• Dissemination of security policies
• Participation in the design of security systems
• Control of updating information systems
• Planning of work on the elimination of vulnerabilities
• Management of security systems
• Development, implementation and maintenance of security policies, procedures and standards according to ISO 27001
• Access Management (IAM), Rights Audit, Implementation of Access Roles (RBAC) and Multi-Factor Authentication">Participation in internal audits, compliance assessment and preparation of reports
• Conducting trainings, phishing campaigns, development of materials to increase staff awareness.

Requirements for the candidate:

• Higher education (computer technology, computer engineering, information systems security)
• 3 years of work experience in a similar position
• Knowledge of security standards requirements: 27001/27002/27005, SOC 2, NIST CSF, GDPR, DPA
• Experience in security monitoring, incident response, response scripting
• Understanding of cryptography: PKI, SSL/TLS, VPN, encryption types
• Experience with ESET, Checkpoint Harmony, Windows Defender, XDR, EDR
• System maintenance experience security SIEM/DLP.

 Personal qualities:

• Communication skills
• Attention to details
• Ability to work in team.

We offer:

• Competitive salary
• Official employment
• Medical insurance after the trial period
• Delicious lunches at the expense of the company
• Working in a comfortable office (open space) from 09:00 to 18:00, reduced working day on Friday until 17:00.