Position: Information Security Specialist
Company: Sombra
Experience required: 2y
English level: intermediate

**Requirements:**
- 1+ years experience working within an information security role.
-  Proven skills and experience in IT and information security standards and best practices (ISO 27001, ISO 27002, GDPR, etc.).
- Experience using endpoints security tools, vulnerability scanning tools.
- English Intermediate or higher.

**Responsibilities:**
- Defining, maintaining and proposing changes to the Company’s ISMS Policies.
- Participating in the Information Classification process.
- Information security audits (access rights review, security controls, etc.)
- Review the adequacy of the security controls and their ability to protect the information system and its information following the requirements of the ISO 27001, ISO 27002, GDPR.
- Assist in tailoring the security control.
- Assist in developing a security assessment plan for each subset of security controls that will be assessed.

**As a Plus:**
- Experience with Network Security tools and solutions: NGFW, UTM, WAF, Vulnerability Scanners, SIEM, Firewalls, Forensics, Pen-testing.
- Deep knowledge of information technology/security audit.
- Basic knowledge of Windows, Mac and Linux operating systems.
- Strong documentation skills.
- Experience in IT company.

**What we offer**:
- Annual paid vacation of 18 working days;
- Extra vacation days for long-lasting cooperation;
- Annual paid illness of 10 days;
- Maternity\Paternity leave;
- The opportunity of sabbatical leave;
- Compensation for sports activities (up to 6000 UAH\year);
- 50 % cost compensation for attending courses for self-development;
- Corporate doctor;
- Internal education(corporate library, Udemy courses);
- Career development plan;
- English classes;
- Paying taxes and conducting private entrepreneurs;
- Technical equipment: laptop, mouse, keyboard, monitor, chair;
- Internal Referral program;
- Opportunity to take part in company volunteering activities;
- Technical community events.