ОПИС ВАКАНСІЇ
We are seeking an experienced and dedicated Information Security Specialist to join our team. The ideal candidate will provide virtual Chief Information Security Officer (vCISO) services to our clients and assist with the implementation of information security standards, including ISO/IEC 27001, ISO/IEC27001, ISO/IEC27017, ISO/IEC27018, PCI DSS and SOC2. This role demands a strong background in information security, practical experience in security frameworks, and the ability to effectively communicate with stakeholders at all levels.
Key Responsibilities:
- Serve as a member of the virtual CISO team for multiple clients, assisting in implementation projects for various security standards
- Develop information security policies, procedures, and guidelines tailored to client needs
- Conduct risk assessments and provide recommendations for mitigation
- Carry out internal audits and facilitate external audits with certification bodies
- Analyze technical vulnerabilities and recommend remediation measures
- Train staff on information security requirements and best practices
- Provide insight and suggestions for improving security
Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or a related field
- Minimum of 2 years of experience in information security, with a focus on ISO27001 implementation or similar frameworks
- Experience in conducting security risk assessments and developing mitigation plans.
- Proven ability to perform internal audit processes
- Relevant certifications such as CISSP, CISM, ISO27001 Lead Auditor/Implementer, or equivalent will be a plus
- Communication, presentation, and documentation skills
- Ability to work independently and as part of a team
Preferred Skills:
- Experience in a consulting environment
- Familiarity with cloud security and information security technologies
- Knowledge of data protection legislation
- Ability to manage multiple projects and clients simultaneously
We offer:
- The opportunity to improve your analytical skills;
- Support of a mentor and experienced colleagues;
- Competitive compensation depending on skills and experience level;
- The ability to focus on your work: a lack of bureaucracy and micromanagement;
- Friendly atmosphere, concern for the comfort of specialists; Flexible working hours;
- 20 working days of vacation.
About SOCSERVE
About SOCSERVE: Elevating IT Infrastructure and Information Security
At SOCSERVE, we specialize in delivering cutting-edge technical support and information security services tailored to the diverse needs of modern businesses. With a steadfast commitment to our clients' growth, we offer comprehensive solutions aimed at fortifying IT infrastructure and safeguarding invaluable data assets.
Our Offerings
As a provider of SOC-as-a-Service and Information Security Outsourcing, we deliver comprehensive security operations and risk management solutions:
- 24/7 SOC Monitoring and Incident Response: Continuous monitoring of client environments to detect and respond to security threats in real-time, reducing risk and minimizing downtime
- Threat Detection and Analysis: Leveraging advanced tools and threat intelligence to identify vulnerabilities and analyze suspicious activities before they escalate.
- Incident Management and Remediation: Quick identification, containment, and resolution of security incidents, supported by a skilled SOC team with a focus on rapid recovery
- Compliance and Reporting: Ensuring alignment with standards like PCI DSS, ISO 27001, and SOC 2, with detailed reporting for audits and regulatory requirements.
- Vulnerability Management and Security Assessments: Regular scans, assessments, and vulnerability remediation to keep systems secure and up to date
- Outsourced Information Security: Acting as an external security team, we provide ongoing security management, policy development, and advisory to strengthen clients' security postures
Our SOC and Information Security Outsourcing services offer end-to-end protection, helping clients stay secure, compliant, and resilient against evolving threats.
Company website:
https://socserve.com/
Контактна інформація →