Information Security Specialist

Company: IBReal
Location: Russia
Work format: remote
Employment: full-time
Qualification: Middle

Our main focus is fintech. Currently, we have 3 active projects that provide services such as unsecured microloans (PDL), microloans secured by equipment and jewelry (pawnshop), microloans secured by cars (auto pawnshop). The projects are geographically divided by countries: Kazakhstan, South Africa, Philippines. Within the projects, we create high-load, asynchronous, fault-tolerant, secure financial services. And importantly - we are constantly adding new innovative functionality.

Responsibilities

The main area of responsibility is the information security of the company's information systems and infrastructure.

It is important for us that the specialist can understand the existing architecture and infrastructure, identify security risks and problems, propose ways to eliminate them, and interact with developers, DevOps, and IT when implementing necessary changes.

The role's responsibilities also include security of access, infrastructure, and applications, analysis of vulnerabilities and incidents, evaluation of new technical solutions from an information security perspective, compliance control with regulatory requirements, as well as maintaining necessary information security documentation.

Knowledge of the legislation of the Republic of Kazakhstan and the requirements of regulators in the field of information security and personal data protection, the ability to apply regulatory requirements to the company's information systems and processes.

Candidate Expectations

What knowledge and skills are important to us:

• Experience in the field of information security.
• Experience in conducting technical audits of information systems for compliance with information security requirements.
• Experience in assessing information security risks and forming information security requirements for developed systems.
• Understanding of IT project management basics; principles of software development, basics of using DevOps in organizing the software development and implementation process.
• Knowledge of the legislation of the Republic of Kazakhstan and the requirements of regulators in the field of information security and personal data protection, the ability to apply regulatory requirements to the company's information systems and processes.
• Experience in developing regulatory, methodological, organizational, and administrative documentation is desirable.

Conditions:

• Employment in accordance with the Labor Code of the Republic of Kazakhstan, Labor Code of the Russian Federation
• Teamwork