Cybersecurity • Over 6 years • Office
RESPONSIBILITIES
- Development of the information security consulting practice;
- Achievement of the financial targets of the division;
- Development of IS services;
- Designing security architectural solutions for private and hybrid clouds;
- Support of strategic sales;
- Compliance with regulatory requirements;
- Development of team competencies.
Participation in strategic sales:
- Support for sales of strategic projects for private and hybrid clouds;
- Participation in customer negotiations;
- Conducting pre-project surveys;
- Development of proposals for ensuring information security within the framework of private and hybrid cloud implementation;
- Defense of architectural solutions before customers;
- Consulting and solution design.
Provision of services for:
- Building security architecture for private and hybrid clouds;
- Risk assessment, development of threat models and attacker models;
- Designing information protection systems using the Zero Trust concept, including integration scenarios with public cloud and access and network management processes.
Regulatory compliance:
- Consulting clients on issues of: compliance with information protection requirements from FSTEC, FSB, CB within their powers; requirements for PDn, Critical Information Infrastructure (CII), State Information Systems (GIS) protection, and other industry IS requirements; preparation for information system certification; building security management processes;
- Development of security services.
Development of service offerings:
- Development and implementation of a cloud IS concept;
- Development and implementation of network templates, rules for working with environments and security groups;
- Patch management process and tools;
- Ensuring compliance with IS requirements and certification;
- IS concept for a corporate AI case;
- Interaction with internal departments for technical support of sales, business development, and implementation.
REQUIREMENTS
Experience:
- At least 6 years in information security;
- At least 2 years of managing IS teams or practices;
- Experience in designing information protection systems for large corporate clients;
- Experience in implementing projects for cloud platform protection;
- Experience interacting with regulators and auditors;
- Experience working with modern public and private clouds.
Technological competencies:
- Ensuring information security in public, private, and hybrid clouds: designing secure cloud architecture;
- Network security;
- Identity and Access Management - Zero Trust concept - Data Security - Container Security - k8s Security - OpenStack Security.
Regulatory competencies:
- Ensuring security of GIS, CII, ISPDn, information systems of financial organizations - certification of informatization objects - building processes for compliance with regulatory requirements.
Commercial competencies: Consultative Selling; Solution Selling; communication with top management of organizations; complex project management; preparation of commercial proposals.
Personal qualities: systemic thinking, ability to work with top management of customers, leadership qualities.
CONDITIONS
- Employment in accordance with the Labor Code of the Russian Federation;
- Competitive income level (salary + annual bonus);
- Voluntary medical insurance with dental coverage and the option to include your children and relatives;
- Transparent motivation system that allows you to influence your income level;
- Work in a team of professionals;
- Participation in the creation of innovative products;
- Flexible start to the workday, Friday is a shortened workday;
- Office in the center of Moscow;
- Corporate mobile communication;
- Preferential mortgage and consumer lending program.