Become part of a strong and friendly team of cybersecurity architects at a Company with one of the most mature corporate architecture functions in the country. You will directly participate in the development of the IT landscape security of SBER and Group companies. You will form and develop reference models and AI tools for the automation of the work of SBER architects and Group companies.
Responsibilities
- Responsible for the automation of requirements in cybersecurity (CS) architecture assessments of subsidiaries and affiliates (S&A).
- Develops the S&A architecture portal in terms of CS: develops CS reference guides, reports, and metrics; implements the "Architecture as Code" approach based on YAML.
- Develops, tests, and deploys AI assistants and AI agents for automation and reduction of routine tasks for Bank and S&A architects.
- Develops and updates reference (typical) CS architectures for S&A, taking into account the specifics of S&A, industry, and regulatory requirements.
- Participates in the assessment of S&A IT landscapes in terms of CS architecture, forms conclusions and recommendations.
- Conducts market research of CS technologies and products, assesses their applicability in the context of CS architecture for S&A.
- Subject area: cybersecurity architecture at the Sber Group scale.
Requirements
- At least 7 years of IT experience, with at least 5 years in information security.
- Experience working in IT integrators or vendors of information security tools (IST).
- Experience in developing/implementing comprehensive information security solutions, knowledge of relevant solutions (ISMS).
- Experience in implementing CS solutions and integrating them into the corporate IT architecture (ISAS, POIB).
- Experience in designing and implementing AI agents/assistants in a secure corporate environment (RAG, agent orchestration, integration with internal systems and data).
- Practical skills in working with LLM platforms, vector databases, assessing response quality, and generation security.
- Understanding of data protection and compliance requirements when using AI (masking/anonymization, access control, auditing, AI usage policies).
- Proficient in the DevOps development approach. Understanding and experience with technologies and products: YAML/JSON, Git, Jenkins, Bitbucket, CI/CD.
- Understanding of IT landscape assessment practices and CS maturity.
Key skills:
- Proficiency in information security methodologies and standards (GOST, ISO 27001, NIST, PCI DSS).
- Understanding and experience in corporate architecture or solution architecture, proficiency in one of the architectural frameworks (TOGAF, DoDAF, Gartner Meta, etc.).
- Prompt engineering skills and design of dialogue scenarios for professional users (architects).
- Languages and scripting: proficient in Python for developing AI agents and automation.
- Experience integrating with corporate and local LLM platforms.
Conditions
- Comfortable modern office near Kutuzovskaya metro station.
- Hybrid schedule (50/50).
- Annual salary review and annual bonus.
- Corporate gym and recreation areas.
- Over 400 educational programs from SberUniversity for professional and career development.
- Extended voluntary medical insurance, preferential insurance for family members, and a corporate pension program.
- Preferential mortgage at Sber, Prime subscription with the possibility of sharing with three close family members.
- Reward for recommending friends to the Sber team.
