Information Security Specialist

Full time

Yerevan

Employment term Permanent

Category IT security/Networks

Apply now

Job description:

We are looking for an experienced Information Security Specialist with 3+ years of experience to join our team. In this role, you will be responsible for developing and implementing access management controls, ensuring compliance with information security policies, standards, regulations, and best practices. You will also identify and assess potential security risks, contribute to risk management activities, and develop and implement risk treatment plan. Additionally, you will support the organization in resolving information security-related issues, including advising other teams and contributing to the continuous improvement of security processes.

Job responsibilities

Develop and implement access control mechanisms, including secure user authentication, authorization, and account management
Identify, assess, and analyze the organization’s potential security risks, develop and implement treatment plan
Develop and maintain internal security policies and procedures, aligned with industry standards and national legislation
Establish and maintain compliance with Information Security standards, frameworks, regulations, and best practices, such as ISO 27001:2022, ISO 27701:2019, PCI DSS
Conduct regular audits and assessments to ensure compliance with security policies and regulatory requirements
Support internal and external audits by preparing documentation and addressing findings
Identify and mitigate data leakage risks and operational errors by implementing appropriate controls to protect confidential and banking information
Log, track, and report security incidents throughout their lifecycle
Solve ongoing problems and collaborate with cross-functional teams to resolve security issues and continuously improve security practices

Required qualifications

3+ years of information security experience
Bachelor's degree or above in Information Security or a related field
Understanding of information security standards and regulations, such as 27001:2022, ISO 27701:2019, PCI DSS
Experience assessing risks, developing and implementing access management controls
Strong knowledge of networking and security systems
Strong written and verbal communication skills (Armenian, English and Russian)
Strong analytical, problem-solving and communications skills
Ability to work independently and as part of a team

Nice to Have

Information Security certifications,
Experience implementing or maintaining 27001:2022, ISO 27701:2019 or PCI DSS
Knowledge of one or more programming languages

Soft skills

Problem solving Analytical skills Team player Communication Skills