Position: Information Security Specialist
Company: Edvantis Software
Category: Other
Experience required: 2y
English level: intermediate

Edvantis is a premier vendor of IT outsourcing services, focusing on software services. Edvantis has a wide and balanced portfolio of industry-leading corporate customers in Europe and the U.S. We are looking for an Information Security Specialist who can maintain the Information Security Management system and conduct internal and drive external security audits.

Responsibilities:
Manage ISMS-related activities in the Company
Maintain and improve ISMS-related documentation including security standards, policies, procedures, best practices, and training to continually elevate the impact of protecting the Company’s people, assets, and reputation
Conduct an annual information security risk assessment, the document identified vulnerabilities, mitigating controls, and residual risks
Conduct threats and vulnerability assessments and determines security requirements and controls following assessment of the business impact of a security breach
Maintain control documentation for all relevant risk areas and business/technology processes
Handle Business Continuity/Disaster Recovery Planning process
Take part in internal and external security audits

Collaboration:
Deliver education and training programs on information security, and privacy matters for employees, other authorized users, and contractors to review participant’s progress
Consult employees about security control measures provided in the company
Function as an internal consulting resource on information security issues for the business units
Create and performs security reporting (metrics, KPIs, security/CEO dashboard)

Operational:
Use security systems (e.g. SIEM, MS365 security center, MS Azure security, vulnerability scanners, anti-virus, anti-malware, firewalls) for risk identification. Reduce false positives
Analyze security breaches to determine their root cause
Investigate and prevent cyber threats to the Company’s assets
Handle information security exceptions
Anticipate security alerts, incidents, and disasters and reduce their likelihood
Perform vulnerability and end-of-life monitoring
Perform vendor patching notification review
Development:
Manage and control security measures and controls usage
Lead activities of various information security controls implementation, usage and improvement
Manage and continuously improve governance, risk management and compliance process

Requirements:
Master’s degree in information security or similar
1+ years of experience in information security
Experience in administering and improvement of an information security program is desirable
Experience in ISMS management
Working knowledge of and experience in the policy and regulatory environment of information security
Knowledge and experience in writing documentation
Understanding of information security controls in IT and business environments
Understanding of DR/BCP
Understanding of international and Ukrainian information security laws/standards
The ability to work collaboratively with a broad range of constituencies is essential
Demonstrated ability to identify security requirements and validate the implementation of applicable controls
Critical thinking and problem-solving skills
Planning and organizational skills
Basic project management, and written and oral communications skills desired
English level – Upper-Intermediate and higher

We offer:
Career and professional growth
Competitive salary
Friendly and highly professional teams
Big and comfortable office, own parking area, restaurants nearby
Medical insurance coverage for employees (Сovid-19 included), plus an option for family insurance coverage at a corporate rate
Paid 12 sick leaves and all holidays
Paid 18 working vacation days
English/German language courses
Ability to work remotely (we provide all equipment)