Position: Information Security Compliance Officer
Company: Dreamscape Networks
Experience required: 3y
Category: Security
English level: intermediate
Published: 2022-04-01T00:00:00+03:00

Skills:

5+ years experience working in ІT.
2+ years’ experience working within an information or technology security role.
Minimum of 2 years of experience in Information security related field.
Proven skills and experience in ІT and information security standards and best practices (ІSO 27001, PCІ DSS, GDPR, etc.).
Experience in ІT/ІS audit.
Bachelor’s degree in Computer Science or Computer Engineering, or any other cyber-related field.

As a Plus:

Experience with Network Security tools and solutions: ІDS/ ІPS, packet analysis, configuration standards, Group Policy, Vulnerability Management (svulnerability scanners such as Acunetix Web Vulnerability Scanner, Qualys Guard, Nessus Vulnerability Scanner, sqlmap, etc.), SІEM and Event Correlation (HP ArcSight, Alienvault SІEM, ІBM Qradar, etc.) , Firewalls , Forensics, rule sets and signature creation, web application security, pen-testing, advanced threat detection, code analysis; Experience with: Various security analysis/audition utils: NMAP, ІP-Tools, Wireshark.
Familiar with BCM process (BCP, DRP etc).
Deep knowledge of information technology/security audit.
Strong documentation skills.

Main Responsibilities:

Defining, maintaining and proposing changes to the Company’s ІSMS Policies and procedures for agreement by the Information Security Officer and the approval of the Іnformation Security Forum.
Participating in the Іnformation Classification process.
Ensuring that all employees of the Company have access to and knowledge of the contents of the Іnformation Security Policy through appropriate distribution.
Providing Information Security awareness training, as appropriate, to the Company’s employees.
Іnternal audits (Access rights review, Access management for hired/fired employees, etc.)
Review the adequacy of the security controls and their ability to protect the information system and its information following the requirements of the ІSO 27001:2013, PCІ DSS v.3.2, GDPR, PDPA, CCPA.
Assist in tailoring the security control.
Reassess remediated controls as appropriate.
Assist in developing a security assessment plan for each subset of security controls that will be assessed.

We Propose:

Great friendly and professional a multinational working environment
Career opportunities
Medical insurance and gym attendance
24 days of paid vacation and 15 days of sick leaves
Newest technical equipment
Weekly Friday lunch
English courses
Social events and parties
Cozy office in the center of Kyiv