AI writes it from your resume. You only have to send it.
Description
What you will do:
Build and develop a comprehensive information security strategy for the marketplace in line with the company's business objectives
Develop an effective cyber risk management model, including identification, assessment, and mitigation of risks for critical business systems
Enhance the protection level of customer data, payment infrastructure, internal services, and cloud infrastructure
Develop Security Operations (SOC), processes for monitoring, incident response, and cyberattack prevention
Implement modern security practices: Secure SDLC, DevSecOps, vulnerability management, access control, and compliance with regulatory requirements
What is important to us:
Experience interacting with enterprise-level information security — deep understanding of corporate system protection architecture, network security, IAM, data protection, and risk management
Experience in building ISMS, developing security policies, managing compliance with ISO 27001, PCI DSS, NIST standards, and personal data protection requirements
Understanding of SOC, SIEM, SOAR, Threat Intelligence, Incident Response, and cyber incident investigation processes
Experience integrating security into software development processes, vulnerability management, and secure application architecture.
Knowledge of AWS/Azure/GCP, Kubernetes, container security, Zero Trust architecture
Experience in building a risk assessment model, conducting security assessments, managing external audits and contractors
Excellent leadership qualities and strategic thinking
Why it is interesting:
We offer a broad area of responsibility and the opportunity to influence architectural and product decisions. We are also happy to discuss and implement your initiatives
Unique culture – we have preserved the startup spirit while building mature processes
We set measurable goals for the entire team and don't just achieve them "for show", but measure the effectiveness and overall impact of our work on the business
Work in teams of strong specialists where depth of expertise and engineering mindset are valued
Teams listen to and hear each other, acting as partners, not just executors
What we offer:
Remote work from anywhere in the world or a cozy office in Tashkent
You can grow here on an engineering or management track, and we also have a well-established regular performance appraisal system
We pay at the level of top companies in the Russian market
Training and development – we support you both within the company and outside (meetups, conferences, professional training, publications). We also help develop your personal brand
Base – a community of professionals with a desire to do great work. A nice bonus – voluntary medical insurance tied to your location, training, and other perks
