IT Security Risk Manager in Ukrayinskiy procesingoviy centr

Responsibilities: Analysis of risks of information systems, network infrastructures and business processes in the field of IT and information security. Development of threat models. Performance of annual risk assessment, development of a plan to minimize threats. Development of regulatory documentation. Participation in projects for the development and implementation of solutions with with the aim of including information security requirements in the system architecture. Development and implementation of annual employee trainings on knowledge and implementation of information security requirements. Interaction with external audit. Requirements for the candidate: Education: higher, information security or IT. It is desirable to have professional certifications. At least 5 years of work experience in the IT field. Knowledge of international standards (PCI DSS, ISO 2700, ISO 31000) and practical skills in IT and IT risk assessment. Knowledge of IT risk management methods - prevention, acceptance, transfer and reduction risk. Practical knowledge in the areas of IS provision of network technologies, distribution of rights and authorities in information systems, working with databases. Experience in the formation of IS requirements for the developed software. Knowledge of the principles and practices of service management. English language: Pre-intermediate Additional requirements for the candidate: Passing a selection test Personal characteristics: Ability and desire for development and learning. Responsible attitude to work. Communicability. Purposefulness. We offer: official employment, 31 days of paid vacation, paid sick leave, the possibility to work remotely