Information Security Architect

Information Security Architect at PSB Bank, Moscow. 3+ years of experience. Salary from 320,000 RUB. Hybrid work.

Participation in the formation and development of the organization's information security system, including organizational and technical measures for information protection. Development of information security requirements for corporate IT infrastructure, data centers and cloud services. Participation in the design and development of information security architecture, including defining security zones, segmentation principles, access control and interaction of information systems. Participation in information security risk assessment, development of threat models and determination of necessary protection measures. Formation of technical requirements for information security tools, participation in the selection and approval of architectural solutions during their implementation. Control of compliance of designed and implemented information systems with established information security requirements. Organizational support of measures to comply with applicable Russian Federation legislation in the field of information protection and personal data. Interaction with IT departments, integrators and external consultants on design, implementation and evaluation of the effectiveness of information protection measures. Participation in preparation for certification, conformity assessment and external audits, support for the implementation of recommendations to eliminate identified deficiencies. Preparation of proposals for improving the information security system and developing the information protection architecture.

Higher education in information security or information technology. Experience in information security from 3 years, including practical experience in organizational support of IS and participation in projects to build or develop information protection systems. Practical experience in the development and implementation of organizational and administrative documentation on information security. Knowledge of the legislation of the Russian Federation in the field of information protection, including 152-FZ, applicable requirements of FSTEC of Russia and FSB of Russia. Understanding of methodologies for information security risk assessment, threat modeling and selection of information protection measures. Understanding of the principles of building an information security architecture for corporate IT infrastructure, including network segmentation, access control and protection of information systems. Knowledge of the purpose, principles of operation and application areas of the main classes of information security tools: NGFW, WAF, SIEM, EDR, vulnerability management systems and cryptographic information protection tools. Understanding of the principles of functioning of network and server infrastructure, virtualization and data storage systems at the level necessary for the formation of information security requirements. The ability to develop and justify requirements for the protection of information systems, interact with technical specialists in the design and implementation of solutions.

Salary from 320,000 RUB. Hybrid work format.