Main responsibilities
- Inspection of the Company's information infrastructure systems. Drawing up inspection reports of special means of ensuring information security, as well as regulations, instructions and other organizational and administrative documents
- Analysis of possible threats to information security, vulnerability of software and hardware, development of intrusion detection technology, assessment of risks associated with threats of destructive information impacts that can cause damage to systems and networks due to unauthorized access, use of disclosure, modification or destruction of information and information management resources systems
- Control of activities to ensure information security in information infrastructure systems
- Development of procedures for managing information security incidents and participation in preventing their further development
- Assessing the technical and economic level and effectiveness of proposed and implemented organizational and technical solutions to ensure information security in the information infrastructure
- Development of procedures and rules of conduct for employees to comply with information security requirements, including during their transfer, dismissal and when interacting with personnel of third-party organizations
- Guiding and training staff to act in crisis situations, including procedures for management and other responsible persons of the information infrastructure
- Carrying out periodic scheduled inspections of the state of personal data protection in accordance with the approved Internal Audit Plan
- Carrying out control and audit activities on access
- Monitoring the use of IT resources. Technical monitoring, organizational measures to ensure business continuity
Our expectations
- Experience with intrusion prevention systems
- Experience with vulnerability scanners
- Experience in passing audits and Pentest checks based on the ISO 27001 standard
- Antivirus administration experience: Kaspersky
- Knowledge of the legislative framework in the field of information protection: ISO/EIC 27001, etc.
- Experience in administering MS AD, MS DHCP server
- Higher education
- Knowledge and understanding of the OSI/ISO model, network protocols
We offer
- Interesting tasks and professional development
- Official competitive salary
- Prospects for career growth through the personnel reserve program
- VHI program
- Personal bonus in honor of the birthday
- A cozy dining room
- Soft adaptation under the guidance of an experienced mentor
- Active corporate life
- Comfortable modern view office on the 12th floor of the Obukhov Center
Working hours
- 5/2 from 09.00 to 18.00
Place of work
- St. Petersburg, Obukhovskoy Oborony Ave., 271, lit. A.
Business center "Obukhov-center"
