Напиши текст вакансии для должности "Information Security Officer". Название компании: "ANCOR". Расположение: Москва. График работы: Полный день. Опыт работы: От 3 до 6 лет. Ключевые навыки: 

В международной фармацевтической компании открыта позиция Information Security Officer, экспертного уровня, в единственном числе. Обязанности:  Act as the face of the Company IS externally and internally so that Company is perceived as IS-advanced and compliant company, maintain strong stakeholder relationships, evangelize security, advise senior leadership, and key stakeholders on cyber risks for Russia. Operationalize and improve security governance structure in three Company legal entities and the Company office and ally with global security function, as well as the local leadership teams. Harmonize security practices and maturity across the Company legal entities. Partner with other regional ISOs and Global Information Security team, to define and implement a security engagement strategy. Communicate and support adherence to the Company Information Security policies and standards, elaborate local policies and standards in accordance with corporate and legislative requirements. Ensure policies, standards, and control frameworks consider local nuances responding Russian laws, regulations, and other requirements. Identification of possible threats to the IS, carrying out a vulnerability search (software and hardware). Participation in the implementation and maintenance of new digital tools, ensures technical protection of information; Understand the threats, IT infrastructure architecture, security posture and business processes in three the Company legal entities and the Company office in order to effectively embed them in the Security Program. Actively govern Cyber and Information Security risks in a manner that meets compliance, regulatory requirements, and the Company’s risk appetite. Conduct cyber risk and maturity assessments, evaluate compliance of IT services with relevant security and regulatory requirements. Experienced in investigation of the incidents on the IS breaches Take a lead in defining and implementing of corrective measures to minimize the information leakages and to maximize the Company’s awareness of attempts to misuse confidential information. Solid knowledge of the regulation governing the IS issues (152-FZ, 149-FZ, orders of Roskomnadzor, the Federal Office for Technical and Export Control (ФСТЭК), Federal Security Agency (ФСБ), decrees of the Russian government and so on) Collaboration with Data Protection Officer (DPO) on IS issues related to processing of personal data (threat model, categorization of personal data, etc.) Interaction with government authorities regarding requests, dawn raids, inspections related to IS issues (e.g. Roskomnadzor) jointly with other relevant departments (DPO, etc). Carry out background checks of candidates, employees and contractors. Strengthen ownership and awareness of Information and Cyber Security through continuous trainings and awareness campaigns. Support execution of cyber-attack simulations and table-top exercises, coordinate Information Security Incident Response and Cyber Crisis Management in Russia.  Требования:  5+ experience in information security officer or other equivalent role, and track record in information security and risk management leadership English - upper-intermediate Experience in cross-functional/cross-legal entity support of information security protection issues is a plus Experience in data privacy is a plus Experience in direct interaction with related government authorities (Roskomnadzor) regarding requests, dawn raids, inspections is a plus Higher education in IT/computer science Addition education in information security, information protection.