Information Security Analyst

компания "dataart" you will work as part of a virtual team spread across different regions following agile methodology. features of the position: we are searching for infosec analyst who would be responsible for assessing new systems, technologies and vendors; highlighting any security risks and ensuring they are appropriately addressed by teams. responsibilities collaborate closely with vendors, product teams, procurement, and other teams to gather the required information for performing assessments сonduct information security assessments on vendors, new products, and architecture by reviewing security questionnaires provide guidance to teams about vendor and application security interact directly with vendors and product teams to get them to address security gaps organize and supervise penetration testing activities as part of information security assessments identify and evaluate technology risks internally and/or at third parties, identify controls that mitigate risks, and look for opportunities for control improvements requirements bachelor’s or master’s degree in information security, computer science or other technical disciplines professional experience in it, risk management, or information security knowledge of common information security controls, guidelines, and standards such as iso 27000 series, soc 2, cis 20 critical security controls, nist experience in conducting information security risk assessments based on security policies, industry standards, guidelines and best practices strong technical knowledge and understanding of security concepts, principles and best practices in areas such as web applications, cloud security, endpoint and network security, identity and access management, security protocols, ssdlc, penetration testing, vulnerability management, etc. experience with cloud offerings such as aws or azure ability to lead meetings and communicate clearly, concisely and confidently strong verbal and written communication skills for explaining technical information to clients, vendors, senior management, and staff ability to manage multiple projects and deadlines simultaneously strong teamwork and collaboration skills proficiency in english (verbal and written) it will be a plus coding skills to automate manual processes