Security Manager

ICL Services is one of the biggest and oldest Russian IT companies currently in top 100 world IT outsourcing companies and key partner of Fujitsu. Today, the company works with more than 80 major clients (Eurobank, Auchan, Kelly Services, British Petroleum, Australia Airline, Itella, Leroy Merlin) from 30 countries. We are dynamic, determined, and provide a broad scope of services to some of the largest and most diverse companies in the world. For this, we are also well-respected and constantly strive to maintain our standards of professional excellence and ethical conduct.

What we offer:

• A full-time employment contract
• An opportunity to work on challenging projects with some of the world's largest companies
• Flexible working hours, home office possibility once up to twice in the week
• Compensation package (private health insurance, team-buildings, professional education and certification)
• Opportunities for advancement within the company:
  • 50% of employees’ got salary raise
  • 30% of employees’ had a career growth
• Opportunity to participate in various corporative programes (MVP - mentoring program)
• Opportunity to be a part of socially responsible business (various activities to support our employees and community generally)
• First six months of induction training and education in modern and comfortable office in New Belgrade
• A highly professional, but very friendly team you will enjoy being a part of
• Overtime working hours are recorded and compensated
• Human corporative culture:
  • 80-85% of our employees appreciate humane corporate culture in ICL Services
  • 85-90% of employees says that they work with great people
• Professional education and certification – ICL genuinely values its employees and works continually on knowledge improvement across the business spectrum

Responsibilities:

• Act as a Security related point of contact for end customer and enhance IT security in collaboration with customer IT Security team
• Define, implement and maintain customer security policies and processes
• Plan, implement and upgrade security measures and controls within customer IT infrastructure
• Perform vulnerability testing, risk analyses and security assessments
• Provide recommendations for hardening customer IT infrastructure
• Manage a diverse team of IT administrators and other IT professionals within information security projects and activities
• Act as a key liaison between upper-level management, IT administrators, IT-related 3rd parties and security auditors
• Anticipate security alerts, incidents and disasters and reduce their likelihood
• Respond immediately to security-related incidents and provide a thorough post-event analysis
• Institute trainings in security awareness for IT staff
• Ensure IT staff compliance with IT security policies and procedures
• Assess, test and select new security products and technologies
• Prepare cost estimates and identify integration issues

Requirements:

• Practices and methods of IT strategy, enterprise architecture and security architecture
• ISO 27001/27002, ITIL and COBIT frameworks
• Secure coding practices, ethical hacking and threat modeling
• Network security architecture development and definition
• Subnetting, DNS, encryption technologies and standards, VPNs, VLANs and other network routing methods
• Network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols, etc.)
• Advanced Persistent Threats (APT), phishing and social engineering, network access controllers (NAC), gateway anti-malware and enhanced authentication
• Firewall, intrusion detection/prevention, IDM and SIEM systems
• Windows, UNIX and Linux operating systems as a plus
• Scripting languages (PowerShell, Python) as a plus
• PCI, NIST and SOX compliance assessments as a plus

We are looking forward to receiving your resume. Our selection process consists of an introductory interview with the team in Belgrade, and a professional interview with our IT experts in Kazan. We endeavor to make our selection process as quick and as transparent as possible – don't hesitate to ask if you have any questions. Please, bear in mind that only shortlisted candidates will be contacted for an interview.