Head of Information Security

"TNET" is announcing a vacancy for the position of Head of Information Security.

Work location: Tbilisi, Nutsubidze 129a

Work schedule: Monday - Friday, 10:00 - 19:00

Website: http://www.tnet.ge/

We are looking for an experienced Head of Information Security at TNET, who will be responsible for developing the company's and its digital platforms' security, managing cyber risks, and ensuring the effectiveness of security controls. The role combines strategic vision, technical competence, and practical work with teams.

Your role at TNET

• Developing the information security strategy, annual action plan, and budget; determining priorities based on business risks;

• Creating, implementing, and monitoring the performance of security policies, standards, and procedures;

• Assessing and mitigating risks to infrastructure, applications, cloud environment, and data security;

• Developing the vulnerability management process: scanning, penetration testing, prioritizing fixes, and verifying results;

• Managing security monitoring, collaborating with SOC, and responding to incidents; analyzing root causes and preventing recurrence;

• Developing controls for access management, privileged accounts, data classification, and leak prevention;

• Coordinating the selection, implementation, and effectiveness assessment of security systems such as EDR, DLP, PAM, and SIEM;

• Collaborating with development, DevOps, and IT Operations teams to improve secure architecture and development processes;

• Participating in assessing security requirements for Business Continuity and Disaster Recovery plans, conducting Business Impact Analysis (BIA), determining RTO/RPO indicators, testing and improving plans.

• Evaluating the security of suppliers and partners; coordinating audits and implementing recommendations;

• Raising employee security awareness and organizing practical training;

• Regularly presenting security indicators, key risks, and action plan status to management.

• Developing controls focused on the security of digital products and users, including account protection, authentication, API security, and automated attack prevention

• Identifying opportunities for automating security checks and controls and implementing practical solutions with technical teams

This vacancy is interesting for you if you have

• At least 5 years of experience in information or cybersecurity, including at least 2 years of experience leading a team, function, or significant security projects;

• Ability to independently manage initiatives, practically solve problems, and determine risk-based priorities with limited resources;

• Practical knowledge of web platform, network, Linux/Windows system, and cloud infrastructure security;

• Experience in assessing security risks, managing vulnerabilities, and responding to incidents;

• Experience working with security technologies: EDR, SIEM, IAM/MFA, WAF; knowledge of DLP and PAM systems;

• Knowledge of application security, OWASP principles, and secure development cycle, Secure SDLC;

• Knowledge of ISO/IEC 27001 and NIST frameworks and ability to apply them in practical processes;

• Experience in coordinating technical and business teams, managing projects, and working with suppliers;

• Experience in planning team work, setting priorities, distributing responsibilities, supporting and developing employees.

• Ability to explain complex technical issues in a way that management can understand and offer risk-based solutions;

• Working knowledge of Georgian and English languages.

The following will be considered an advantage

• Experience in high-load digital platforms, e-commerce, technology or financial sector;
• Experience in security of AWS, Kubernetes, containers and CI/CD processes;
• Experience in implementation of DLP/PAM, development of SOC or creation of Information Security Management System - ISMS;
• CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Lead Auditor or other relevant professional certificates.
• Knowledge of PCI DSS, COBIT and GDPR requirements and corresponding controls.
• Practical experience in Cloud Security, DevSecOps, API Security and Security Automation
• Knowledge of basic risks and protection principles of AI/LLM-based systems security, including Prompt Injection, data leakage and AI agents' access security.
• Practical experience in using AI tools or interest in automation of cybersecurity processes, threat analysis and improvement of security checks effectiveness.

If you want to join the largest digital ecosystem in Georgia, send us your resume and specify the vacancy title in the subject.

Personal Data Protection:

LLC "Tnet" processes candidate's personal data to determine compliance with existing and/or future vacancy requirements and to make a decision on employment in accordance with the requirements of the Georgian Law "On Personal Data Protection", specifically:

• Your personal information will be processed for no more than 3 years;
• You are entitled to request information about the data that LLC "Tnet" processes about you;
• You are entitled to request correction, update, addition, blocking, deletion and/or destruction of your personal data.