Viva (Viva Armenia CJSC)

Job description:

Information Security Senior Specialist իs responsible for all ongoing activities that serve to provide appropriate access to and protect the confidentiality and integrity of Company, employee and other business information in compliance with law, regulations, policies and standards for one or more assigned systems in Viva Armenia.

He/She is also responsible for participation in audit engagements in the framework of subjects approved in the annual audit plan and non-planned investigations.

/en/information-security-senior-specialist-14

Job responsibilities

• Participate in the works in the framework of planned and non-planned audit engagements;
• Participate in the works of preparation of corrective action plans as a result of audit projects;
• Follow up the implementation of agreed corrective action plans and submit periodical reports on their status;
• Provide consultation within the framework of implementation of improvement works by respective subdivisions, based on available knowledge and experience.
• Monitor the internal control systems to ensure that appropriate access levels are maintained;
• Perform risk assessment tasks and risk management planning related to the information security features of systems;
• Generate various security incident reports;
• Maintain and administer security tools;
• Provide periodic reporting on information security issues to the IT Audit UM;
• Maintain the SIEM (Security Information Event Management) application device nodes;
• Perform SIEM audit log management, analysis and reporting;
• Monitor and maintain the access rights of the Company employee;
• Ensure all new requests are compliant to the approved policies and standards․

Required qualifications

• Bachelor's degree in relevant sphere;
• At least 2 years work experience as systems administrator or information security senior specialist;
• Knowledge of Windows and Unix systems.
• Knowledge of Oracle, MS SQL and My SQL are preferred;
• Knowledge of security concepts, protocols, processes, architectures, and tools (authentication and access control technologies, intrusion detection, network traffic analysis, incident handling, media/malware analysis, etc.);
• Knowledge of ISO 27001 compliance and best practices;
• Good knowledge of International standards for the professional practice of IT auditing;
• Good knowledge in Armenian, Russian and English languages;
• Good knowledge of Information Security products such as PKI, VPN, firewalls and intrusion detection systems;
• Strong interpersonal, communication and negotiation skills;
• Time management skills;
• Analytical skills.

Required candidate level: Senior

Additional information