Information Security Manager

Key tasks:

• Writing and maintaining up-to-date Information Security Management System (ISMS) documentation;
• Participating in information security incident investigations;
• Conducting internal information security audits;
• Supporting third-party penetration tests, supervisory audits, and certification processes;
• Managing access to company and/or customer systems (if necessary);
• Developing and delivering information security training;
• Implementing information security risk mitigation measures;
• Implementing new information security standards;
• Ensuring GDPR and privacy compliance (updating policies, conducting DPIAs, and data mapping);
• Managing third-party privacy risks and Data Processing Agreements (DPAs);
• Handling data breach protocols and Data Subject Access Requests (DSARs).
   

Core Competencies:

• Knowledge and understanding of network infrastructure;
• Understanding of Information Security Management System (ISMS) principles;
• Experience administering Active Directory-based domains;
• Knowledge of virtualization systems (e.g., VMware, Hyper-V);
• Knowledge of Linux-based servers (Ubuntu);
• Knowledge and understanding of PCI DSS, ISO 27001, and GDPR standards and compliance requirements;
• Practical knowledge of Data Protection principles (DPIA, data mapping, DPAs);
• Experience in developing regulatory and procedural documentation (concepts, policies, regulations, provisions, instructions, etc.);
• Knowledge of risk analysis methods, organizational and technical measures for information protection, as well as related technologies, software, and hardware tools;
• Knowledge and ability to apply best practices in the field of information security and data privacy;
• At least 1 year of professional experience in information security or data protection;
• English proficiency at B2 level.
  
   

We offer:

• Stable salary;
• Convenient work schedule: Monday to Friday, 9:00 AM — 6:00 PM;
• Comfortable working conditions: cozy office or remote work (subject to stable internet and electricity availability);
• Opportunities for growth and development in a dynamic company.