Information Security Lead in Uklon

Direct message from Uklon to the member who posted the job Mariana Turchyna Mariana Turchyna Join Uklon Uklon is a product IT company that develops a leading ride-hailing service. Every day, the powerful Uklon team pumps one of the largest infrastructures in the market of Ukraine and beyond, ensuring the interaction of drivers and riders. We create a highload product, behind which are hidden ambitious technological challenges, continuous innovations and non-obvious moves. Our work framework is to test new hypotheses, push your ideas and use the latest technology stack.Join us as Information Security Lead Hiring process:Introduction and some technical meetings.For details on how to meet our team, contact Mariana, IT RecruiterWhat we are we offer precisely for this role: • involvement in the further development of product safety of the leader of Ride-hailing services on the Ukrainian market • support ISO 27001 and ISO 22301 certifications • leadership of product safety, infrastructure safety and access management teams • modern approaches to building processes • the opportunity to improve your skillset by working with the Uklon expert community • regular performance & salary review • a company culture in which everyone is significant and valuable and has an impact on processes How exactly can you influence the development of the company: • planning, motivation, organization and control of work Information Security• a full cycle of work with risks (identification, analysis, control of information security and business continuity risks for the company)• interaction and adjustment of processes with all other departments to ensure data protection• inventory of the company's information resources• processing of security incidents and implementation of solutions to prevent repeated of an incident • training users in the basics of information security, control over awareness of company rules • documentation of information security and continuity management processes businessChallenges for six months:• independently conduct an audit of the existing ISMS\BCMS and propose improvements• prepare and successfully pass an ISO 27001/22301 supervisory audit• conduct a penetration test• update the training program and content and questionnaires (on information security and business continuity) for company personnel• creating a matrix of accesses to types of information and speeding up the automation of Access Management processes. To achieve results, you will need: • experience in information security from 5 years • experience in building and implementing information security • experience in managing information security teams from 5 people • experience in cross-functional teams • experience in conducting security audits ISO 27001, ISO 22301 • experience in managing security incidents: analysis ,determining the causes, developing recommendations and implementing changes to minimize risks • understanding of the main information security standards: ISO 27001/22301, NIST Cybersecurity Framework, OWASP Top 10 • knowledge of the basics of product security and secure development (AWS, Secure SDLC) • knowledge of modern cyber security technologies We , of course, we will teach, but it is good to have:• legal and regulatory knowledge: understanding of local and international regulatory data requirements (GDPR, CCPA, etc.) How do you regulate your working hours? • you can plan your own work schedule, however, to be efficient, but we have mandatory joint working hours - business hours, from 11:00 to 16:00 • 20 days off for personal needs and 10 - due to illness (with retention of remuneration) • day off on your birthday as a gift to the company • day off for blood donation How will you pump your bones in Uklon?• internal trainings, workshops, hackathons, knowledge sharing, etc.• corporate training• corporate library and subscriptions to information resources• attending webinars, lectures with the participation of company speakers, etc.• personal/team budget for training• English lessonsWork (War) — Life Balance is a socially responsible company, therefore we devote a lot of time to activities related to volunteering, and also regularly support team spirit during non-working hours: we love driving team building, sports competitions, etc. We say "no" to routine and monotony, that's why we create a space where it's really fun to do your job - you won't be bored with us. Health Care:• corporate health insurance, including for members who are abroad Regular Sport Activities: • Uklon Football every week• Uklon Online Yoga every weekIf you are looking for a driven and ambitious product company focused on development and global expansion, interested in using of the latest technologies and ready to further improve your expertise, join the Uklon team. Before applying for an open position at Uklon, please read the Terms of Processing and Protection of Candidates' Personal Data. By sending us your personal data, including those contained in your resume, you consent to the processing of personal data in accordance with these Terms. Show more Show less Position level Senior secondary level Type of employment Full time Job duties Information technologies Industries Software development