Information Security Specialist

"UCC" is announcing a vacancy for the position of Information Security Specialist.

Position purpose:

The practical implementation of approved information security policies and procedures in the company, monitoring of security control mechanisms, timely detection of possible threats and violations, and participation in the process of responding to information security incidents.

Main responsibilities:

• Daily implementation of approved information security policies and procedures and monitoring their compliance;
• Accounting for information assets and updating relevant registers;
• Control of the process of granting, changing, and canceling user access rights, including periodic verification of accesses (Access Review);
• Monitoring of information systems, security events, and notifications, primary analysis of system logs (Logs);
• Verification of the status of technical security mechanisms (antivirus, EDR, etc.);
• Detection, registration, primary assessment, and participation in the process of responding to information security incidents;
• Identification of security gaps and non-compliances, monitoring of their elimination process;
• Collaboration with the IT team to ensure practical implementation of security requirements;
• Recording of conducted checks, identified violations, and incidents, and preparation of relevant operational reports;
• Participation in employee information security awareness-raising events.

Mandatory requirements:

• Education in IT, information security, or a related technical field;
• Work experience in information security, IT administration, or IT control;
• Knowledge of basic principles of information and cybersecurity;
• Knowledge of Windows, Active Directory, network infrastructure, and user access management principles;
• Ability to perform primary analysis of system logs (Logs) and security events;
• Knowledge of basic processes for managing information security incidents;
• Ability to apply security procedures and instructions in practice;
• English language skills at the level of reading and understanding technical documentation.

Will be considered an advantage:

• Experience working in the financial, banking, or payments sector;
• Experience working with SIEM, EDR, DLP, or Vulnerability Management systems;
• General knowledge of ISO/IEC 27001 and Information Security Management System (ISMS);
• General knowledge of information security requirements established by the National Bank of Georgia;
• Security+, ISO 27001, CCNA CyberOps, or other relevant certifications.

Personal skills:

• Analytical and logical thinking;
• Attention to detail and high sense of responsibility;
• Ability to work independently and escalate problems in a timely manner;
• Organization and correct prioritization;
• Effective communication and teamwork skills;
• High standard of confidential information protection.

Interested parties, please send your resume to.