Company: Grinatom
Location: Moscow
Employment Type: Full-time
Salary: up to 130,000 ₽ per month
Responsibilities:
- Development (updating) of methodological, organizational and administrative, operational, and attestation documentation for the ASZI information security system
- Development (updating) of technical documentation for information security
- Participation in preparation for attestation of information systems, participation in conducting attestation tests (compliance assessment) of the information system (AS/ASZI)
- Conducting annual control of the information system's security level in accordance with the procedure established by the program and methodologies for attestation testing of the information system
- Conducting checks of the security status of information systems and monitoring compliance with information security requirements
- Inventory and control of the use (composition, placement, condition, etc.) of ASZI software and hardware
- Updating the ASZI Technical Passport (structure according to the requirements of FSTEC of Russia Order No. 77)
- Consulting users on information security issues
- Monitoring the compliance of ASZI users and administrators with relevant instructions and regulations
- Information security incident logging
- Participation in the commission for investigating information security incidents
Candidate Profile:
- Higher education in information security or other higher education with at least 3 years of experience in licensed activities or completed professional retraining in an information security specialization
- Understanding of information security system creation principles
- Knowledge of normative requirements of federal legislation and regulators in the field of information protection (including Federal Laws 98, 149, 152, 187, Decrees of the Government of the Russian Federation 1119, 1233, Orders of FSTEC of Russia 17, 117, 21, 77, FSB of Russia 378, ISO 27 001). Knowledge and experience in the field of protection of critical information infrastructure (information systems of particularly important objects): Presidential Decree No. 250, Federal Law 187, Decrees of the Government of the Russian Federation 1272, 127, Orders of FSTEC of Russia 235, 239 are welcomed.
- Knowledge of modern technologies and technical solutions for information security (preferably - network security, web applications, DBMS, OS, virtualization environments, remote work)
- Experience in developing organizational and administrative documents, operational documentation for information security systems
Working Conditions:
- Modern workplaces
- Digital services for employees
- 5/2 work schedule, Saturday and Sunday are days off, work ends at 16:45 on Fridays
- Office-based work format (Nagatinskaya metro station, "Newton Plaza" Business Center)
Benefits:
- Voluntary medical insurance from the first working day, including dental care
- Extensive library of online courses
- Corporate events
- Discounts and special offers from partners
Additional Instructions:
1-2 interview stages