International IT Information Security Specialist

LCWaikiki

• Minimum 4 years of IT experience or equivalent, preferably experience in IT Audit or IT security related activity, or equivalent,
• Fluency in English, Russian knowledge is a plus,
• No obstacles for travelling abroad,
• Experience in Risk Management, industry best practices such as PCI-DSS, COBIT, ITIL, ISO 27001 and 27002,
• Experience in using application security tools like Qualys, Accunetix, Burp, Nessus, IPS, IDS, VPN and Firewalls,
• Experience in URL Filtering, Web and Mail Security, Antivirus, DLP and SIEM Tools, OS and Database Security Practices, Penetration Testing and Vulnerability Assessment
• Expert level knowledge of Microsoft Office applications (Word, Excel, Access, Power Point)
• Professional certifications in Information Security (CISA, CISM, CISSP) are desirable,

İŞ TANIMI

• Managing all procedures and documents related Information Security for International organization,
• Performing Risk Analyse and prepare action plan for International IT, regularly update it,
• Improving security maturity of international organization base on countries in 4 different regions; CIS, CEE, MENA, and Russia,
• Performing risk scans for all envoirements, realistic tests to measure maturity level of International organizations,
• Ensuring International IT met Information Security domains such as equipment security, network security, application security, personal data protection, payment data protection, business countinuty,
• Writing and updating security policies, procedures and standards for Information Security Management System with co-operation of Risk Management,
• Visiting countries to perform Information Security country assessment according to control list and preparing final assessment report and action plan to improve maturity of security level,
• Performing store audit with co-operation of International IT professionals, security scans regularly, Vulnerability, WAS, PCI-DSS,
• Helping IT units during designing and improving IT processes with COBIT and ISO 27001 and 27002 best practices,
• Performing risk assessments of ongoing\future projects and current processes to evaluate compatibility with the security measures, preparing businnes countinuty and disaster plans,