Information Security Specialist

Develop and implement Information Security policy and relevant policies, procedures, instructions; Implement the Group Information Security Policy (GISP) according to local requirements rules and regulations; Participate in the development, implementation, testing and update of Business Continuity and Recovery Plan; Monitor security processes in the information systems and identify risks, threats and actual or potential vulnerabilities including new trends arising from the emerging technology; Perform annual information security risk assessments with and for both current IT projects and current IT environment of the Bank; Inventory and classification of information assets; Selection and implementation of new information security ITsystems; Participate in the investigation information security incidents. ITsystems security audit and pen testing, new ITsystems security analysis before its’ implementation; Information Security Awareness Program development and implementation, testing of employees; Implementation of Personal Data protection controls; Providing Bank’s Management and Departments with advice regarding Information Security; Administration of antivirus and antispam systems, employees’ access to the Internet, personal firewalls, PC hard disks encryption, IS security logs collection and analysis, digital signature SEP NBU, internal PKI, vulnerabilities search, intrusion prevention system, physical access control, video surveillance.Successfully implemented projects: ISO 27000 series (СОУ Н НБУ 61 СУИБ 0/0:2010) implementation according to the NBU’s requirements; Digital Signature Certification Center (PKI) implementation for core banking and other IT systems (CA IIT); Implementation of centralized antimalware system using McAfee technology for desktops and servers; Information and physical security requirements within backup data site implementation (on the basis of virtualization systems); Development of set of rules for firewall (Cisco); Implementation of a centralized log collection and management system; Implementation of a Security Information and Event Management system (SIEM) on the test environment (ArcSight); PCI DSS Gap analysis; Implementation of ITpurchase process on the basis of tenders.

Administration of several systems of PKI ("Dzherelo" developed by IIT, SEP NBU, core banking system "Profix", "Crypto Pro", "Cipher", several systems developed internally) and numerous application software which use encrypted protection; Employees’ access rights administration and audit; Internal network information security audit, employees’ activity analysis; Video surveillance system administration, incidents analysis; ATMs maintenance with regard to security facilities.

System administration of servers and workstations under Linux, MS Windows Server/Workstation, Novell Netware, DBMS Oracle (on the basis of Red Hat Linux) – in total about 15 servers, 800 workstations in the network; Proxy, antivirus, email and backup systems administration; Wrote extensive documentation for the ongoing maintenance of the system.

Контактна інформація доступна лише для зареєстрованих роботодавців.
Перейти до реєстрації компанії/банку