Specialist in standardization, certification and quality in De Novo

Responsibilities:

• Implementation and maintenance of the quality system in accordance with the requirements of the ISO/IEC 9001 standard, certification of the Company for compliance with the specified standard
• Implementation and support of the system in accordance with the requirements of the ISO/IEC 22301 standard, certification of the Company for compliance with the specified standard
• Support of implemented information security management systems (ISMS) and personal data processing (PIMS)
• Preparation of relevant of internal organizational and administrative documents in the field of information security and the field of personal data protection (policies, regulations, instructions, orders, etc.)
• Participation in incident handling processes in the field of information security and the field of personal data protection< /li>
• Support of processes regarding the assessment and processing of information security risks and risks in the field of personal data protection
• Organization and participation in internal audits of the Company
• Support of external, certification and supervisory audits of the Company
• Participation in the development of project documentation of KSZI, support of necessary measures regarding KSZI, support of the processes of obtaining the appropriate certification
• Accompanying inspections by supervisory authorities in the field of informatization
• Implementation and implementation of the Company's plans in the areas of standardization and certification.

Requirements:

• Higher education (preferably technical or legal)< /li>
• Understanding the principles of implementation and support of the quality management system in the IT sphere.
• Experience in certification for compliance with the requirements of ISO group standards
• Knowledge and understanding of ISO/IEC standards 9001, 22301. Experience in application, implementation and maintenance
• Knowledge and understanding of information security industry standards ISO/IEC 27001, 27002, 27005, 27017. Experience in application, implementation and maintenance
• Knowledge and understanding of current legislation in the field of information protection (both Ukrainian and European)
• Knowledge and understanding of industry standards in the field of personal data protection ISO/IEC 27701, 27018. Experience in application, implementation and maintenance.
• li>Knowledge and understanding of current legislation in the field of personal data protection (Law of Ukraine on the Protection of Personal Data, EU GDPR)
• Ability to navigate the search and clarification of European Union legislation in the field of information protection and personal data protection.
• Knowledge and understanding of industry regulatory documents in the field of KSZI
• Knowledge and understanding of PCIDSS standard requirements

We understand the importance of protecting your Personal Data and we draw your attention to the fact that your feedback on the specified vacancy is confirmation of your voluntary consent to the processing of your Personal Data of "DE NOVO" LLC specified in your resume and additional data necessary for "DE NOVO" LLC to receive your feedback on the specified vacancy< /em> in order to find a Candidate to fill a vacant position.