We develop and support government information systems:
Unified Information System for Procurement, zakupki.gov.ru
GIS Torgi, torgi.gov.ru
EBP Finance (module of GIIS Electronic Budget)
The project office team is responsible for the full cycle: development, implementation, operation, and compliance with regulatory requirements.
Tasks:
- Support of the department's projects for the development, implementation, operation, and maintenance of information systems;
- Development of technical specifications, threat and intruder models, operational and organizational-regulatory documentation for information security for GIS and PDN IS;
- Vulnerability analysis - assessment of exploitability, development of compensating measures;
- Consulting development, operation, and maintenance teams of information systems on information security issues;
- Conducting assessments, ensuring compliance with legislation requirements and best practices of the information security regime in the department's projects (personal data information systems, state information systems, etc.).
Requirements:
- At least 3 years of experience in the field of information security;
- Knowledge of the requirements of the Russian Federation legislation in the field of information security (149-FZ, 152-FZ, 63-FZ, etc.), regulatory and methodological documents of FSTEC and FSB of Russia (orders of FSTEC No. 117, 21, orders of FSB No. 321, 66, etc.);
- Knowledge of Russian standards in the field of information security (GOST R ISO/IEC 15408, GOST R 57580.1-2017, GOST 34.603-92, GOST R 56939-2016, etc.);
- Experience in developing threat models, organizational-regulatory documentation, and information protection reports for GIS;
- Higher technical education in the field of information security or higher technical education with additional education in the field of information security.
Will be a plus:
- Experience in participating in the certification of information systems, software certification, assessment of cryptographic module integration correctness, assessment of SF impact on cryptographic modules;
- Knowledge and experience in applying the provisions of Russian standards and methodological recommendations of FSTEC of Russia for secure software development.
We offer:
- We offer official employment and a stable and transparent income;
- Work format: remote within the Russian Federation, with the option to visit the office if desired;
- All benefits and advantages of working in an accredited IT company;
- Training: corporate university, electronic library, webinars with external and internal experts, career counseling center;
- Communities: speaker school, debate club, Habr writers, esports;
- Sports: football, volleyball, and basketball clubs, partial compensation for sports expenses;
- Health: VHI (Voluntary Medical Insurance), including dentistry and insurance for relatives, doctor in the office, "Ponimayu" service (psychological and legal consultations);
- Partner programs and discounts for employees: at partner stores, fitness clubs, educational platforms, leisure events;
- Own comfortable office, which has space not only for work but also for sports and recreation: gym, beauty salon, summer coworking on the roof;
- Food: canteen, equipped kitchens, coffee kiosk, vending machines with healthy food.
How to apply:
Please attach a brief cover letter (up to 1 page). Describe:
- What documents did you develop (threat models, CTR, etc.);
- For which systems (class, security level);
- Which regulatory acts did you follow;
- How many projects did you manage per year and how many did you support simultaneously.
