A leading specialist in information security management in Comfy

Hello, if you are reading this vacancy right now, it means that you are already halfway to your dream job #klaaaassss.We are not stopping, we are just gaining momentum so let's be #nambervan and get acquainted with our vacancy as soon as possible. The main goal of the position is to update and implement a set of information security documentation in accordance with ISO/IEC 27001, GDPR, internal business requirements.

Main responsibilities:

• Development and updating:
• information security policy;
• procedures and regulations IS;
• orders, regulations, standards;
• matrices of access, roles, responsibilities.
• Building and description of ISMS (Information Security Management System).
• Harmonization of internal documents with:
• ISO/IEC 27001, 27002;
• GDPR (Data Protection, DPIA, RoPA, etc.);
• audit and control requirements.
• Participation in internal and external audits.

Our ideal candidate is you if you:

• Experience in information security at least 5 years.
• Practical experience of development and implementation:
• IS policies, procedures, standards, orders;
• ISMS documentation in accordance to ISO/IEC 27001.
• Participation in the preparation and/or passing of:
• internal and external audits;
• checks for compliance with regulatory requirements.
• Experience with GDPR requirements (documents, processes, roles).
• Interaction with IT, SOC, DevOps, legal and business units.

Ready to offer you:

• High compensation according to skills.
• The opportunity to influence, improve and adjust business processes.
• Democratic style management and a friendly team.
• Lightcommunication skills, team interest and orientation to the best result.
• Long-term work on analytics with extensive cross-functional interaction.
• Paid vacation and sick days.
• Official employment.
• Discounts in COMFY stores and our partners.