Company: Tsifra
Location: Moscow
Experience: 3 to 6 years
Responsibilities :
- Conduct an assessment of IT projects and information systems for compliance with information security requirements
- Identify risks at the design stage, analyze architecture, integrations, and technical documentation
- Develop recommendations for improving the security level of information systems and business processes
- Advise development and analytics teams on information security issues and assist in preparing the necessary documentation
- Participate in the support of external information security audits and interact with auditors on technical issues.
What we are looking for:
- Experience in information security, system architecture, or IT infrastructure
- Basic Linux and Windows administration skills
- Understanding of modern IT systems principles: microservice architecture, API, containerization, and integration services
- Familiarity with Docker, Kubernetes, PostgreSQL, Redis, and modern information security tools
- Experience analyzing information system architecture, integrations, and technical documentation
- Understanding of common security threats to web applications, APIs, and corporate information systems
- Knowledge of network security principles (TLS, VPN, Firewall, WAF, DNS, load balancers)
- Ability to identify information security risks and prepare recommendations for their elimination
- Experience in formulating information security requirements for IT projects and information systems;
- Understanding of requirements for the protection of personal data and other confidential information, as well as the ability to balance security requirements and business objectives.
Will be an advantage:
- Experience as an information security architect or analyst, especially in the banking or financial sector
- Practical experience in penetration testing or participating in information system security assessments
- Knowledge of industry standards and requirements for information security (GOST 57580.1, PCI DSS, etc.)
- Experience in preparing for audits, conducting assessments of compliance with information security requirements, and supporting inspections.
