Tasks to be performed:

• Development (updating) of methodological, organizational and administrative, operational, and certification documentation for the information security system (ASI)
• Development (updating) of technical documentation for information protection
• Participation in the preparation for the certification of informatization objects, participation in the conduct of certification tests (compliance assessment) of the informatization object (AS/ASI)
• Conducting annual control of the informatization object's security in accordance with the procedure established by the Program and methodologies for certification testing of the informatization object
• Conducting checks of the security status of informatization objects and monitoring compliance with information security requirements
• Inventory and control of the use (composition, location, condition, etc.) of software and hardware of the ASI
• Updating the Technical Passport of the ASI (structure according to the requirements of FSTEC of Russia Order No. 77)
• Consulting users on information security issues
• Monitoring the execution by users and administrators of the ASI of relevant instructions and regulations
• Information security incident logging
• Participation in the commission for investigating information security incidents

Candidate Requirements

• Higher education in the field of information security or other higher education with at least 3 years of work experience in the field of licensed activities, or having completed professional retraining in one of the information security specialties
• Understanding of information security system design principles
• Knowledge of regulatory requirements of federal legislation and regulators in the field of information protection (including Federal Laws 98, 149, 152, 187, Decrees of the Government 1119, 1233, Orders of FSTEC of Russia 17, 117, 21, 77, FSB of Russia 378, ISO 27001). Knowledge and experience in the field of critical information infrastructure (CII) security are welcome: Presidential Decree No. 250, Federal Law 187, Decrees of the Government 1272, 127, Orders of FSTEC of Russia 235, 239
• Knowledge of modern technologies and technical solutions for information protection (preferably - network security, web applications, DBMS, OS, virtualization environments, remote work)
• Experience in developing organizational and administrative documents, and operational documentation for information security systems

Working Conditions

• Modern workplaces
• Digital services for employees
• Work schedule 5/2, Saturday and Sunday are days off, working until 4:45 PM on Fridays
• Office-based work (Nagatinskaya metro station, "Newton Plaza" Business Center)

Bonuses

• Voluntary medical insurance from the first working day, including dental care
• Extensive library of online courses
• Corporate events
• Discounts and special offers from partners

Additional Instructions

1-2 interview stages