Information Security Process & Compliance Engineer

Information Security Process & Compliance Engineer

ISsoft, a subsidiary of Coherent Solutions, is a digital product engineering company focused on empowering business success. Our global team of 2000+ talented professionals collaborate seamlessly to deliver innovative solutions that drive measurable business impact. Headquartered in Minneapolis, USA, the company’s core competencies across 10 locations worldwide include product software development, IT consulting, data and analytics, machine learning, mobile app development, Dev Ops, Salesforce, and more.

We grow a team of advisors, not just order takers, and strive to make the company a place for career growth and opportunities. If you want to grow your core competencies, share your passion and be sure that every contribution is evaluated, we are on the same page.

The Information Security Process & Compliance Engineer is responsible for implementing and maintaining the company Information Security Management System (ISMS) in accordance with the requirements of Information Security best practice and standards (primarily ISO 27001), as well as Client requirements. The Info Sec Engineer supports Info Sec processes, including compliance management, risk management, incident management, audits, measurement, and other related activities.

To work effectively, the Info Sec Engineer will develop relationships with and collaborate with other functional IT groups, including business units, network/system administrators, and Dev Ops teams.

• 1+ years in the IT industry, specializing in information security or students of relevant universities.
• Experience with core ISMS processes such as risk management, incident management, conducting audits, metrics, compliance reviews, etc.
• Desirable: experience in developing Info Sec policies and procedures.
• Basic knowledge of modern Info Sec standards, best practices, frameworks such as the ISO 27001 series, NIST, etc.
• Basic knowledge of system technologies (AD, DHCP, DNS, SMB, etc.), network technologies (LAN/WAN, TCP/IP and other network protocols).
• Basic understanding of security technologies and concepts such as SIEM, NGFW, patching, vulnerability assessment, antivirus/EDR, etc.
• Desirable:
  Security certifications such as CISA, CISM, CISSP, CompTIA Security +, etc.
• Team player with proven ability to work with people - resolving conflicts, willing to engage in constructive discussion.
• Ability to carry out personal daily and weekly planning.
• Willingness to learn and discover new areas in the field of Information Security.
• Level of English - from B1 (spoken/written).

The global benefits package includes:

• Technical and non-technical training for professional and personal growth;
• Internal conferences and meetups to learn from industry experts;
• Support and mentorship from an experienced employee to help you professional grow and development;
• Internal startup incubator;
• Health insurance;
• Sports activities to promote a healthy lifestyle;
• Flexible work options, including remote and hybrid opportunities;
• Referral program for bringing in new talent;
• Work anniversary program and additional vacation days.