Information security specialist (Middle)

компания "kpmg" what we do: kpmg is a global network of professional services firms. across 147 countries, 219 000 kpmg people provide audit, tax and advisory services to a huge range of clients, from leading brands to public bodies, global multi-nationals and local businesses. responsibilities: risk analysis/examination of projects for the implementation and modernization of information systems as an information security expert; monitoring and control of it infrastructure security, identification and elimination of vulnerabilities of protected resources; analysis of information risks, risks of the technical architecture of projects; development of methodology and processes for assessing information security risks (waterfall and agile projects, supply chain risks, etc.); creation and maintenance of information security risk register, heat maps; development of access matrix templates; development of the information assets classification methodology; requirements: higher technical education (preferably in the field of information security); experience in information security from 3 years; skills of a technical is writer; knowledge of international information security standards (iso2700x, nist, sans, pci dss, etc.); experience in developing organizational and administrative and technical documentation; knowledge of methods and fundamentals for assessing and managing information security risks (cramm, octave, owasp and others); experience in information security risk management and participation in company risk assessment; knowledge of information security technologies (anti-virus protection, electronic signature, information leakage protection, firewalling, protection against network attacks, etc.); good understanding of the various business processes of companies with a branch structure; knowledge of project management systems and requirements; knowledge of the secure application development cycle (sdlc); knowledge of english at least at the pre-intermediate level, correspondence and analysis of documentation in english. what we offer: health and life insurance (after probation); annual bonus based on performance results; convenient office location; career growth opportunities; great corporate culture.