Company: MTS Bank
Location: Moscow
Experience: 3 to 6 years
MTS Bank is a team that develops digital financial services and makes them accessible to everyone.
We work with a modern technology stack, high-load systems, and cloud infrastructure, implementing best engineering practices. This approach allows us to create reliable solutions for business and clients.
Responsibilities
- develop and update local information security regulatory documents (Policies, Regulations, Rules, Instructions, etc.)
- organize personal data protection
- ensure organizational information security, including planning information security measures
- develop organizational information security, including fostering and developing employees' information security skills
- develop and implement information security measures in the organization in accordance with the information security requirements established by current Russian Federation legislation
- implement and administer information security tools
- monitor the state of information security in the organization, including assessing the security of systems and networks, and monitoring information security events
- manage projects aimed at improving the information security system
- interact with other departments of the organization on information security issues
- interact with regulators on the organization's information security issues
Candidate Profile
- experience in developing regulatory documents: development and updating of Information Security Policies, Regulations, and Instructions (including documentation for Federal Law 152)
- implementation of Federal Law 152 requirements: independent Gap Analysis, threat modeling, development of organizational and administrative documentation, and implementation of personal data protection measures "from scratch"
- experience in deploying and configuring DLP systems (writing security policies, controlling data leaks)
- experience in administering Kaspersky Endpoint Security (configuring Application/Device Control policies, management via KSC), deploying EDR solutions (configuring detection triggers, incident investigation)
- experience working with security scanners, risk analysis, planning and monitoring the remediation of identified vulnerabilities
- understanding of network operation principles, network protocols (TCP/IP, DNS, HTTP/S, etc.), directory services (AD, LDAP), and corporate IT system architecture for competent security measure design
- project management: managing information security system modernization projects, planning budgets and timelines, preparing status reports for management
- experience in building effective interaction with the IT department (network, server, and workstation administration) for seamless integration of information security tools, prompt vulnerability remediation, and ensuring a balance between security and business processes
