Chief Information Security Officer (CISO)

We are looking for an experienced CISO to ensure the comprehensive protection of the company's information assets — from code and infrastructure security to regulatory compliance and interaction with government bodies, capable of building cybersecurity processes that will reduce business risks.

• formation and implementation of the company's information security strategy; defining cybersecurity priorities in line with business goals;
• cybersecurity risk management and planning mitigation activities;
• organizing source code vulnerability checks, including SAST/DAST;
• infrastructure analysis and protection, threat identification and elimination; control of secure configurations for servers and services (Docker, Kubernetes, clouds);
• interaction with FSTEC, FSB, Ministry of Health, and other regulators; adapting the product to the requirements of regulators and key customers; conducting version inspection control;
• development of a cybersecurity culture within the company; incident management and crisis communications; interaction with technical and business teams;
• organization of internal and external cybersecurity audits; analysis of results and control of corrective actions; monitoring current threats; development and support of SOC;
• participation in industry events, expertise exchange; interaction with key clients on cybersecurity issues

Experience: More than 6 years Key skills: Information Security, Management Skills

• 5+ years of experience in IT cybersecurity;
• deep understanding of cybersecurity standards and requirements;
• ability to build cybersecurity processes and control their execution;
• experience managing cybersecurity teams of 10+ people;
• experience in managing cybersecurity projects;
• ability to make decisions in crisis situations, set priorities;
• ability to communicate effectively with developers, business, and top management;
• experience in negotiations with regulators and partners;
• strategic thinking and a systematic approach

Required Technical Skills:

• internet protocols and web application vulnerabilities;
• system administration;
• code vulnerability analysis;
• SAST, DAST, penetration testing methodologies;
• vulnerability scanning tools;
• secure infrastructure principles (servers, networks, containers, clouds)

Location: Moscow