Chief Information Security Officer

• Leading the company's information security function: organizing the department's work, coordinating activities, and monitoring the effectiveness of information security processes

• Developing and implementing information security strategy: forming policies, standards, and measures to protect information assets, improving the information security system in line with the company's business goals and current cyber threats

• Ensuring cybersecurity and IT infrastructure protection: organizing the prevention, detection, and repelling of cyberattacks, responding to incidents and eliminating their consequences, monitoring the security of information systems and networks

• Ensuring compliance with legislative and regulatory requirements: organizing compliance with the requirements of the FSB of Russia, FSTEC of Russia, and other regulators, interacting with government bodies and the National Coordination Center for Information Security (NKCZI) on information security issues

• Developing and improving the information protection system: organizing the implementation and modernization of organizational and technical information security measures, unifying solutions, transitioning to domestic protection tools, developing and updating normative and technical documentation, including information security requirements for IT projects and digital transformation

• Managing risks and controlling the effectiveness of information security: organizing regular security assessments, threat monitoring, control of compliance with information security requirements by employees and contractors, coordinating interdepartmental interaction, developing employee competencies, and participating in information security solution procurement

• Interacting with company management: preparing management reports, informing about the state of information security, key risks, and the results of implemented measures, forming proposals to improve the level of protection

Experience: More than 6 years

• Higher education in information security, information technology, or related technical fields

• At least 8 years of experience in information security, including at least 3 years in a similar position

• Practical experience in building and developing an information security function in large IT companies or organizations with complex distributed IT infrastructure

• Experience in developing and implementing information security strategy, managing cyber risks, budgets, and teams

• Deep understanding of modern cyber threats, corporate infrastructure protection architecture, cloud environments, and digital products

• Experience in organizing monitoring, detection, and incident response processes, vulnerability management, and business continuity assurance

• Understanding of the principles of operation of SOC, SIEM, SOAR, EDR/XDR, IAM/PAM, WAF, and other key information security technologies

• Knowledge of Secure SDLC, DevSecOps practices, ISO/IEC 27001 standards, NIST and MITRE ATT&CK approaches

• Knowledge of applicable regulatory requirements in the field of information and personal data protection

• Experience interacting with senior management, justifying management decisions, and building effective cross-functional interaction

Location: Moscow

• Implementation of large-scale projects
• Competitive remuneration level
• Employment in accordance with the Labor Code of the Russian Federation;
• 5/2 work schedule;
• Voluntary medical insurance with basic dental care, as well as the option to enroll close relatives;
• Partial compensation for lunches;
• Opportunity for advanced training courses at the employer's expense;
• Coffee, tea, and cookies, fruits freely available in the office, relaxation area