6 дней назад
BS Information Security Specialist (GRC Analyst)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
BS Information Security Specialist (GRC Analyst) (Information Security/GRC): Implementing and supporting the Information Security Management System in a product company with an accent on risk assessment, security documentation, audits, and regulatory compliance. Focus on analyzing security requirements, tracking weaknesses through remediation or risk acceptance, and ensuring compliance with GDPR and ISO 27001/27002.
Location: Ukraine; remote or office work
Company
Business Systems is a product company focused on digital products and services for the FMCG industry.
What you will do
- Implement and support the Information Security Management System across the company.
- Conduct annual security risk assessments and document vulnerabilities, mitigating controls, and residual risks.
- Create and maintain information security policies and standards based on best practices and compliance requirements.
- Collaborate with departments to document processes and advise on implementing security requirements.
- Facilitate internal, external, and third-party audits, including meeting coordination and preparation of required information.
- Analyze client security requirements, identify non-compliance areas, and track security weaknesses through remediation or risk acceptance.
Requirements
- 1–2 years of experience in information security.
- Experience creating and maintaining security documentation and participating in internal and external audits.
- Knowledge of risk management techniques, ISO 27001/27002, and GDPR.
- Ability to work independently across multiple projects, lead meetings, document decisions, and improve processes.
- Upper-Intermediate English level in speaking and writing.
- Degree or education in Information Security or Computer Science.
Culture & Benefits
- Remote or office-based work format.
- Work in a product-focused environment with direct involvement in client needs and business expertise.
- Collaboration with teams supporting clients in the FMCG industry.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →