Position: Information Security and Privacy Compliance Manager
Company: Zoral Labs
Category: Security
Experience required: 5y
English level: upper

Zoral Labs, a leading provider of research and development to the software industry, is searching for Information Security and Privacy Compliance Manager (ISPCM) to join its development center in Kyiv

About the project:
We are looking for a person that helps our international headquarters and clients to achieve ISO/IEC 27001/27017/27018, AICPA SOC 2 Type 1/2, PCI DSS, and other certifications or compliance for Zoral FinTech applications in lending/mortgage industries deployed in clouds for international clients.

Requirements:

•	Information security risk management: at least 2 years work experience in this area, ideally holding relevant qualifications such as CISSP, CISM or degree
•	Compliance and enforcement: at least 3 years work experience in this area
•	English: good spoken and written
•	Desired personal traits and competencies:
o	Decisive – able to make complex decisions, prioritize along strategic lines, and take appropriate action without prevaricating or unduly delaying, yet willing to be held to account for those decisions and actions, and willing to seek and accept advice from experts where necessary
o	Persuasive: overcoming inertia, reluctance etc. and convincing people to fulfil their obligations
o	Diplomatic, rational, and reasonable – able to manage tricky situations sensibly and fairly, engendering trust and respect in themselves despite the often-delicate nature of the role (e.g., dealing professionally with noncompliant managers or business partners)
•	General: at least 15 years employment
Candidates must be willing to undergo background checks to verify their identity, character, competence, qualifications, skills, and experience.

Responsibilities:

•	Ensure that the organization achieves a sufficient level of compliance with relevant information security and privacy-related obligations imposed by laws, regulations, standards, contracts, policies
•	Own the information security and privacy parts of the compliance database:
o	Assist with the drafting, review, and implementation of the compliance elements of information security and privacy policies
o	Lead internal compliance audits, assist with client audits where Zoral is a supplier
o	Prepare reports concerning compliance failures, breaches, or incidents
•	Advise on information security and privacy compliance matters
•	Communicate and consult with IT / project / senior management, external authorities, client contacts

We offer:
Zoral offers attractive salary, compensation package, as well as good opportunities for career and personal development.