We are looking for a Lead Information Security Specialist to join our team
Job Responsibilities:
Ensuring compliance with the PCI DSS standard;
Maintaining compliance with ISO 27001;
Maintaining compliance with ISO 27701 (GDPR);
Monitoring the operation and measuring the effectiveness of the Information Security Management System (ISMS);
Providing employees with the required amount of information security training materials and organizing relevant training sessions;
Conducting personnel background checks;
Preparing information security status reports;
Developing internal policies and documentation related to the implementation and operation of the Information Security Management System.
Required Knowledge and Skills:
Strong knowledge and understanding of networking principles;
Understanding of monitoring systems (SIEM);
Hands-on experience with Active Directory—based domains;
Knowledge of virtualization systems;
Server administration knowledge, including Linux (Ubuntu-based) environments;
In-depth knowledge of PCI DSS, ISO 27001, and GDPR requirements;
Experience in developing regulatory and methodological documentation (concepts, policies, procedures, regulations, guidelines, instructions, etc.);
Knowledge of risk assessment methodologies, organizational and technical information security controls, as well as information security technologies and software/hardware protection solutions.