Position: security
Category: Security
English level: intermediate
Years of experience: 2


Worked as Information Security Specialist at local company for 2 year. I was responsible for ensuring the security of company systems and data through the implementation of effective policies, procedures, and technologies. Through my efforts, the organization was able to reduce the risk of security incidents and achieve compliance with industry-standard frameworks. My responsibilities were:
Developed and implemented access control policies and procedures to ensure that access to company systems and data is granted on a need-to-know basis.
Conducted awareness training sessions for employees to educate them on information security risks and best practices.
Led the incident response team in responding to security incidents, including conducting investigations and documenting incident reports.
Implemented data loss prevention technologies to prevent the unauthorized disclosure of sensitive information and conducted regular audits to ensure the system was working effectively.
Developed and implemented third-party risk management policies and procedures, including conducting due diligence on vendors and monitoring their compliance with security requirements.
Led the organization's audit assessment activities, ensuring compliance with industry-standard frameworks such as PCI DSS and NIST. Worked with external auditors to ensure that audits were conducted effectively.