Information Security Specialist

Overview:

SOFTSWISS continues to expand the team and is looking for an Information Security Specialist to join our team. We need a true, experienced and accomplished professional who shares our culture and values.

Key responsibilities:

• Audit the current level of process maturity within several departments of the company group, analyze risks, and formulate a development plan in this direction.
• Systematically work with process owners to formalize and classify processes, as well as define security requirements.
• Train employees on information security matters and communicate requirements and regulations.
• Establish a system for monitoring process compliance with security requirements.
• Proactively work on modeling potential threats and developing scenarios for dealing with them.
• Maintain processes, applications, tools, and documentation in a state suitable for passing a PCI DSS audit.

Key requirements:

• Successful practical experience in implementing information security within companies with a minimum of 50 employees.
• Understanding of BPM (Business Process Management), process anatomy (owner, inputs, outputs, resources, etc.).
• IT experience, including at least a basic understanding of SDLC (Software Development Life Cycle), network operations (routers, load balancers, firewalls), basic protocols (TCP/IP, SSH, HTTP), and modern cryptography.
• Experience in implementing data access control systems (Data Governance).

Would be a plus:

• Broad technical knowledge. Experience working in the IT industry in an engineering role.
• Experience with security audits (PCI, ISO, SOC2).
• Experience in the financial sector or other areas where data security and integrity are critical requirements.
• Practical experience collaborating with engineering teams in the iterative development of complex applications (security architecture reviews, threat modeling).
• Strong self-organization skills, time management, and workload management.