Position: Information Security Analyst
Company: DataArt
Experience required: 2y
Category: Security
English level: upper
Published: 2022-07-01T00:00:00+03:00

POSITION OVERVIEW
We are searching for InfoSec Analyst who would be responsible for assessing new systems, technologies and vendors; highlighting any security risks and ensuring they are appropriately addressed by teams.

Responsibilities
Collaborate closely with vendors, product teams, procurement, and other teams to gather the required information for performing assessments
Сonduct Information Security Assessments on vendors, new products, and architecture by reviewing security questionnaires
Provide guidance to teams about vendor and application security
Interact directly with vendors and product teams to get them to address security gaps
Organize and supervise penetration testing activities as part of information security assessments
Identify and evaluate technology risks internally and/or at third parties, identify controls that mitigate risks, and look for opportunities for control improvements

Requirements
Bachelor’s or master’s degree in information security, computer science or other technical disciplines
Professional experience in IT, risk management, or information security
Knowledge of common information security controls, guidelines, and standards such as ISO 27000 series, SOC 2, CIS 20 Critical Security Controls, NIST
Experience in conducting information security risk assessments based on security policies, industry standards, guidelines and best practices
Strong technical knowledge and understanding of security concepts, principles and best practices in areas such as Web Applications, Cloud Security, Endpoint and Network Security, Identity and Access Management, Security Protocols, SSDLC, Penetration Testing, Vulnerability Management, etc.
Experience with cloud offerings such as AWS or Azure
Ability to lead meetings and communicate clearly, concisely and confidently
Strong verbal and written communication skills for explaining technical information to clients, vendors, senior management, and staff
Ability to manage multiple projects and deadlines simultaneously
Strong teamwork and collaboration skills
Proficiency in English (verbal and written)

Nice to have
Coding skills to automate manual processes