Information Security Engineer

We are looking for an Information Security specialist to protect our IT infrastructure and to develop and improve the company's information security processes.

Responsibilities

• Conducting information security audits and risk assessments
• Developing and maintaining information security policies, regulations and procedures
• Ensuring compliance with the legislation of the Kyrgyz Republic, National Bank of the Kyrgyz Republic (NBKR) requirements and international standards
• Assessing the security of server, network and cloud infrastructure
• Organizing vulnerability, access and security incident management processes
• Overseeing the application of information and personal data protection measures
• Collaborating with IT and DevOps teams on security matters
• Participating in preparation for audits and ISO/IEC 27001 certification

Requirements

• 1+ year of experience in information security
• Knowledge of ISO/IEC 27001 and ISO/IEC 27002 standards and the fundamentals of information security risk management
• Understanding of networking technologies, Linux, Firewall, VPN, Active Directory/LDAP
• Experience conducting security audits, vulnerability assessments and writing documentation
• Knowledge of access management, monitoring and incident response principles
• Understanding of modern information security methods and tools

Nice to have

• Experience in FinTech, banking or payments
• Knowledge of NBKR regulatory requirements
• Experience with Docker, Kubernetes, GitLab CI/CD
• Experience with SIEM, EDR/XDR, DLP
• Participation in ISO/IEC 27001 implementation or audit
• Relevant information security certifications

What we offer

• Competitive salary
• The opportunity to shape information security processes and technical decisions
• A team of professionals who are passionate about what they do
• Comfortable working conditions and a friendly atmosphere
• Professional development and training at the company's expense