Information Security Specialist (Cybersecurity)

Company: State Institution "Agency of the Republic of Kazakhstan for Financial Monitoring"

• Ensuring the information security of information systems and the information and communication infrastructure of a government body • Monitoring information security events, analyzing logs, and identifying potential threats • Working with information security systems, malware protection tools, and information protection means (DLP, SIEM, Kaspersky Security Center, and others) • Identifying, registering, and analyzing cybersecurity incidents, participating in measures to eliminate them • Conducting internal information security audits and monitoring the elimination of identified violations • Developing, updating, and maintaining documentation on information security issues • Preparing reporting and analytical materials, fulfilling instructions and requests from government bodies on information security issues • Interacting with the Committee for Information Security, JSC "GTS", and other specialized organizations on cybersecurity assurance issues • Participating in the organization of cyber exercises, preventive measures, and employee training on the basics of cyber hygiene

• Skills in conducting lectures, training events, and briefings on information security and cyber hygiene, as well as organizing and conducting cyber exercises, including simulating phishing attacks and analyzing their results

• Higher education in the field of information security, cybersecurity, or information technology • Knowledge of the legislation of the Republic of Kazakhstan in the field of information security: Law "On Cybersecurity", Digital Code, Law of the RK "On Personal Data and its Protection", as well as Unified Requirements in the fields of digitalization and cybersecurity assurance • Knowledge of the operating principles and practical skills in administering DLP, SIEM, IDS/IPS, Firewall, and antivirus software systems • Experience using Kaspersky Security Center, Active Directory, Windows Server, and Linux, as well as working with information protection tools • Skills in monitoring and analyzing event logs, identifying suspicious activity, and investigating cybersecurity incidents • Understanding of the principles of computer networks, network protocols, VPN, and access control mechanisms • Experience in conducting internal information security audits, risk assessments, and monitoring compliance with regulatory requirements • Skills in developing and updating internal regulations, policies, procedures, and instructions on information security • Experience in preparing official letters, memos, analytical reports, reports, and responses to requests from government bodies • Knowledge of the procedure for interacting with authorized government bodies and organizations in the field of cybersecurity (Committee for Information Security, JSC "GTS", KZ-CERT) • Skills in organizing measures to prevent information security incidents, conducting briefings, and improving employees' cyber literacy

City: Astana Employment: offline Salary: 300-400 thousand KZT

Official employment Schedule 5/2, 9:00-18:30, 2 salaries for vacation pay