Position: Information security manager/Security consultant
Company: Develux
Category: Security
Experience required: 3y
English level: upper
Published: 2023-08-01T00:00:00+03:00

**Develux is an IT consulting and software development company with products for the US market and outsourcing services worldwide. The company has been on the market since 2014 and has achieved perfect results in our four business units. We have 300+ goal-oriented, passionate specialists who are open to new challenges.**

**What do you need to do?**
- Supporting management processes within ISMS.
- Update/improve existing security-related processes in the company.
- Write IT security policies for company contractors, and update existing policies.
- Internal audit: proceed with the results in order to improve company security.
- Help with choosing and preparing requirements of company IT systems&tools in relation to security.
- Risk analysis and assessment.
- Detection and response to security incidents.
- Training and education among employees (security awareness).

**What professional skills are essential to us?**
- 3-5 years of experience in the IT/Cybersecurity industry.
- Knowledge and understanding of international IT / IS standards and approaches (ISO / IEC27k, Cobit, ITIL, PCI DSS, NIST, GDPR, etc.).
- Experience with PCI DSS standard implementation, performing PSI DSS audit (3-4 level).
- Experience and understanding of the risk management concepts.

**Nice to have: **
- Excellent communication skills and technical English (Intermediate+).
- Experience with SOC 2 or ISO 27001 certification.
- Experience with cloud security management (e.g. GCP & AWS).
- Experience of communication with third parties (such as external auditors).
- Experience of conducting trainings.
- Experience in writing technical documentation.
- Understanding the ISMS and SDLC concepts.

**Questions and Answers:**
- Does the job come with a probation period, and if so, how long does it last?
Yes, there is a three-month probation period.

- What is the expected work schedule?
Full-time, flexible, please start no later than 11:00 (on average 8 hours per day). The office in Kyiv is open from 9:00 to 20:00. You can work remotely and also you can choose hybrid mode where you can combine working on-site and remotely.

- How many vacation and sick days are provided?
Annual paid vacation – 21 working days;
Paid confirmed sick leave;
6 unconfirmed sick days/days off a year.

**What social package and benefits are offered?**
- English courses (up to 80 USD/month after successful completion of the probation period);
- Compensation for the cost of a subscription sports center (up to 80 USD/month after successful completion of the probation period);
- Medical insurance (50% after successful completion of the probation period) or $200 a year for health care;
- Corporate events.

**Hiring process:**
- Screening call with our recruiter
- Technical interview with Security Consulting Agency + Board of Develux
- Reference check
- Proposal for cooperation with Develux