Information security specialist in credit reporting

Описания нет

• Develop and systematize system and information ownership, information and data classification guidelines, standards and procedures.
• Develop, establish and maintain standards, procedures and guidelines to promote the security and uninterrupted operation of computer-based application systems at ACRA Credit Reporting.
• Identify and address exposures to accidental or intentional destruction, disclosure, modification, or interruption of information that may cause serious financial and/or information loss to ACRA Credit Reporting.
• Be responsible for the protection of the ACRA Credit Reporting assets and information which are processed by or stored in ACRA Credit Reporting computerized information systems.
• Monitor the internal control systems to ensure that appropriate access levels are maintained;
• Perform risk assessment tasks and risk management planning related to the information security features of systems;
• Generate various security incident reports;
• Maintain and administer security tools;
• Provide periodic reporting on information security issues;
• Maintain the SIEM (Security Information Event Management) application device nodes;
• Perform SIEM audit log management, analysis and reporting;
• Monitor and maintain the acces rights of the corompany employee;
• Ensure all new requests are compliant to the approved policies and standards.
• Network configuration and routing

• Bachelor' s degree in relevant sphere;
• At least 5 years of full-time work experience as Network or System Administrator;
• Knowledge of Windows and Unix systems;
• Knowledge of MySQL;
• Hands-on experience in Cisco and Palo Alto Firewalls;
• Strong understanding of network protocols, routing(OSPF, BGP), NAT, and ACL...
• Have an in-depth understanding of Security products such as VPN, firewalls, WAF, IDS/IPS, DLP, EDR, NAC, SIEM and PAM systems;
• Knowledge of security concepts, protocols, processes, architectures, and tools (authentication and access control technologies, intrusion detection, network traffic analysis, incident handling, media/malware analysis, etc.);
• Knowledge of ISO 27001 compliance and best practices;
• Knowledge of the English, Russian and Armenian languages;
• Time management, planning and reporting skills are required.

• Условий в вакансии нет