Position: Information Security Officer
Company: 3DLook
Experience required: 2y
English level: intermediate

3DLook is on a mission to bring deeper levels of personalization to the consumer shopping experience by turning body data into business intelligence and remove the challenge of fit communication between consumers and the places they love to shop.
We are result-oriented enthusiasts who work tirelessly to build technology that has the potential to transform the fashion industry and the way we shop online. We combine expertise and experience and work together to deliver outstanding results for our clients.
This is a great opportunity for you to shape the growth, development, and culture of an exciting and very fast-growing company in the retail market.
We are looking for a self-driven **Information Security Officer** who will help us to take control of digital privacy and security. You will be responsible for establishing appropriate standards and controls, manage security technologies, and direct the establishment and implementation of related policies and procedures.

**Requirements:**
At least 2+ years of experience in Information Security/Cyber Security;
Strong hands-on experience with Security Information and Event Management (SIEM) / Incident Management & Automation systems;
Strong familiarity with International Security Standards;
AWS and Docker security experience;
Knowledge of working principles of DNS / DHCP / SMTP / SNMP, etc.;
Familiarity with SOC2 Framework;
Knowledge of the most common vulnerabilities and ways of mitigation of their exploit;
Relevant Security, Systems, and Networking certifications are a plus.

**Responsibilities:**
Design and implement General Enterprise Security Policy;
Support, maintain and operate security infrastructure and technologies used by SOC and make recommendations to enhance threat detection;
Maintain, tune and troubleshoot SIEM Solution to deliver optimal performance and best detection and investigation capabilities;
Organize internal controls that adequately measure and manage the risks the company faces;
Plan and carry out security measures that will protect a business’s data and information from deliberate attack and unauthorized access;
Perform regular internal audits;
Develop and execute on the data privacy strategy, that is aligned with the business roadmap of the company;
Resolving issues related to data privacy and security;
Communicate with the external auditors within the responsibility area;
Train and test staff on information system security best practices;
Stay up-to-date on information technology trends and security standards

**What we offer:**
Stock option plan;
Investment in your growth and self-development;
Competitive compensation;
20 working days of paid vacations and paid sick leaves;
10 remote days each month and one remote month from another country per year;
Foreign language classes inhouse and communication with native speakers;
Online fitness with a corporate trainer;
Modern and conveniently located offices with good working conditions;
Corporate, social, and cultural events.