Position: CISO (Head of Information Security)
Company: Cosmolot
Experience required: 5y
Category: Security
English level: upper
Published: 2023-01-01T00:00:00+02:00

Responsible for the design, implementation and continuous improvement of the ISMS, including corporate and end-point security, data protection, web application hardening, Incident management, vulnerability management, access and identity management, etc.

**Responsibilities:**

- Participate in web application development as a security expert to design and control mitigation measures
- Preparation and leading PCI DSS certification process
- Consult and review implementation in servers and AWS hardening
- Implement, maintain and improve processes of Incident management, Vulnerability management, access and identity management
- Cooperate with legal and IT on IT asset management, fulfil regulatory requirements and external assessments from governmental regulators
- Cooperation with outsourcing company on physical security and end-point protection.

**Background:**

- 5+ Years’ experience in information security management roles
- Experience in e-commerce, gambling, dating, and crypto/financial industries.
- Expert knowledge and experience in Information Security and IT methodologies, technologies and frameworks (such as ITIL, COBIT, OWASP, NIST etc.)
- Expert knowledge in security in web technologies with hosting on-premise and in the AWS cloud
- Experience in the facilitation of certification, external regulator audits and penetration testing
- Good understanding and practical experience in security systems and processes( Vulnerability management, Incident management, IAM, end-point protection)
- Relevant certifications such as CISSP, CISM, GIAC GSE, CCNP, CCNA, Security+, SANS, SCNP, etc. highly preferred

**What do we offer:**

- Challenging tasks that contribute to professional and personal growth;
- Modern and comfortable office in the heart of Kyiv which you will attend after our victory;
- Medical Insurance;
- Flexible working hours;
- Work in a team of professionals but humans, where you can always find a support;
- Good salary + social benefits + Education;
- Team-building events for the employees (after the wartime ends, of course).