Senior Specialist of the Information Security Department

Tasks to be performed:

• Development (updating) of methodological, organizational and administrative, operational, and attestation documentation for the information security system of automated systems for information security (ASZI).
• Development (updating) of technical documentation on information security.
• Participation in the preparation for the attestation of informatization objects, participation in the conduct of attestation tests (compliance assessment) of the informatization object (AS/ASZI).
• Conducting annual control of the security of the informatization object in accordance with the procedure established by the Program and methods of attestation tests of the informatization object.
• Conducting checks of the security status of informatization objects and controlling compliance with information security requirements.
• Inventory and control of the use (composition, placement, condition, etc.) of ASZI software and hardware.
• Updating the ASZI Technical Passport (structure according to the requirements of order of FSTEC of Russia No. 77).
• Consulting users on information security issues.
• Monitoring the implementation by users and administrators of ASZI of relevant instructions and regulations.
• Information security incident logging.
• Participation in the commission for investigating information security incidents.

Candidate Requirements

• Higher education in the field of information security or other higher education and at least 3 years of work experience in the field of activities related to the licensed type of activity, or having completed professional retraining in one of the information security specialties.
• Understanding of the principles of creating information security systems.
• Knowledge of regulatory requirements of federal legislation and regulators in the field of information protection (including Federal Laws 98, 149, 152, 187, Decrees of the Government 1119, 1233, Orders of FSTEC of Russia 17, 117, 21, 77, FSB of Russia 378, ISO 27001). Knowledge and experience in the field of IS for Critical Information Infrastructure (CII) is welcomed: Presidential Decree of the Russian Federation No. 250, 187-FZ, Decrees of the Government 1272, 127, Orders of FSTEC of Russia 235, 239.
• Knowledge of modern technologies and technical solutions for information protection (preferably - network security, web applications, DBMS, OS, virtualization environments, remote work).
• Experience in developing organizational and administrative documentation, operational documentation for information security systems.

Working Conditions

• Modern workstations
• Digital services for employees
• 5/2 work schedule, Saturday and Sunday are days off, working until 16:45 on Fridays.
• Office-based work (Nagatinskaya metro station, "Newton Plaza" Business Center)

Bonuses

• Voluntary medical insurance from the first working day, including dental care.
• Large library of online courses.
• Corporate events.
• Discounts and special offers from partners.

Additional Instructions

1-2 interview stages