Title: Deputy General Director for Information Security in Subsidiaries
Company: T-Bank
Location: Moscow
Experience: 3 to 6 years
Security is an important part of our business. We create products following the Security by Design principle and protect not only ourselves but also our partners.
You will take on the position of Deputy Director for Information Security, the creation of which is dictated by the requirements of Presidential Decree No. 250, in one of T-Bank's subsidiaries. Your mission is to ensure business security and full compliance with regulatory requirements.
We are looking for specialists who are passionate about the idea of security and want to grow in their profession. If you are ready to offer bold solutions, apply non-standard approaches, and achieve results, we are waiting for you in our team.
Responsibilities:
- Bear personal responsibility for ensuring information security in accordance with Presidential Decree No. 250, organize interaction with information security regulators (FSTEC, FSB, FINCERT, RKN).
- Implement the information security strategy in subsidiaries, including ensuring the execution of corporate information security plans and frameworks.
- Provide transparent information security reporting to local management and T-Bank's information security department.
Requirements:
- Mandatory: Higher specialized education or professional retraining of at least 512 hours in "Information Security"
- Work experience in leadership positions in information security, preferably in critical information infrastructure (CII) entities, the financial sector, or systemically important enterprises.
- Deep knowledge of the Russian Federation regulatory framework: 187-FZ (CII), 152-FZ (Personal Data), FSTEC Orders (No. 17, 21, 31, 235, 239) and FSB, provisions of Decree No. 250.
- Experience in interacting with regulators and successfully passing inspections.
- Understanding of threats to modern company infrastructure
- Understand modern approaches to information security: ZeroTrust, Secure by Design, DevSecOps, and Shift Left.
- Knowledge of modern information security tools: FW, NGFW, L7 FW, IPS/IDS, NDR/NTA, AntiDDoS, SIEM, EDR/XDR, IDM, PAM, MFA, DLP, VM, and so on.
- Ability to justify your point of view and communicate your thoughts to employees of any level
We offer:
- "Upgrade" learning and development platform. Courses, trainings, webinars, and knowledge bases. Support from mentors and coaches, assistance in identifying growth areas and career development
- Comprehensive health care program. We will issue a VHI policy with broad coverage and accident insurance. We will offer preferential insurance terms for your loved ones
- Free fitness room in the office or partial reimbursement of sports expenses. The fitness room is equipped with zones for various activities. You can train independently or join group classes with a trainer
- Opportunity to work in an accredited IT company
- Free breakfast and lunch in our cafe. And if you want a snack, there is a kitchen on each floor with tea, coffee, and fruits
- A line of preferential tariffs for T-Bank products
- Well-being program that helps improve psychological and physical health, as well as deal with legal and financial issues
- Three additional vacation days per year
- Decent salary – we will discuss it at the interview
Skills: Information Security
