(fluent Ukrainian) IT Risk Analyst

Title: (fluent Ukrainian) IT Risk Analyst (remote)

Location:

• Madrid, Community of Madrid, Spain
• Barcelona, Catalonia, Spain
• València, Valencian Community, Spain
• Seville, Andalusia, Spain
• Málaga, Andalusia, Spain

Type: Contract

Workplace: Fully remote

Job Description:

Who are we?

SupportYourApp is an international Support-as-a-Service company that has been providing business process outsourcing services for other IT companies around the world (technical and user support, services to improve user experience) for 15 years. Currently, our international team has 1300+ specialists.

We provide services around the world, supporting customers in 60 languages, cooperating with leaders such as MasterCard, Calm and MacPaw, have international hubs, and develop innovative products such as — to make the customer experience better every day.

About the position:

We are looking for an IT Risk Analyst who seeks to apply their knowledge of information security, gain experience in an international IT company, interact with the team and partners from all over the world, as well as participate in interesting and complex projects in the field of GRC and compliance together with our Security team.

Sounds interesting? Read more 

With us you can practice:

• Supplier Risk Management:
  • Conducting supplier security checks;
  • Search and collection of information from open sources (OSINT);
  • Maintenance and updating of risk assessment registers.
• Communication:
  • Filling out and processing client questionnaires on information security in accordance with international standards (ISO 27001, SOC 2, NIST);
  • Initial review of contracts with customers (DPA/MSA) to identify discrepancies between the company's internal processes and customer requirements;
  • Processing requests from other departments.
• Ensuring compliance of devices with information security requirements:
  • Monitoring, analysis and verification of evidence (logs, screenshots) to confirm the compliance of employees' devices with security requirements;
  • Communication with users to eliminate non-compliance with security requirements;
  • Maintaining a register of approved devices.
• Documentation and operational activities:
  • Creation and updating of internal instructions, procedures and materials of the information security knowledge base.
• Raising awareness of employees on information security issues
  • Participating in phishing simulations;
  • Assistance in the preparation of materials and letters on information security for employees.
• Incidents:
  • Initial handling of security incidents: evidence gathering, baseline investigation, and coordination of communication between the parties involved.

You are our ideal candidate if you have:

• Understanding of the principles of information security (Confidentiality, Integrity, Availability);
• Understanding the requirements of the most common information security standards and legislation in the field of security and personal data protection;
• Analytical thinking and ability to work with documentation, data and security incidents;
• Developed soft skills: communication skills, competent communication, attention to detail and accuracy, self-organization and the ability to work with deadlines.
• English level B1–B2.

Why it's great to be part of our team:

• Provision of services during business hours;
• Unique art spaces in Kyiv at the station. m. Vasylkivska (feel the atmosphere! ) or the possibility of cooperation in a remote format;
• Trust-based communication and no activity trackers;
• Harmony between project workload and personal time, as well as internal medical policy;
• Creative community and culture focused on people and mutual feedback;
• Attractive rewards for inviting friends;
• Competitive compensation in USD;
• Paid onboarding and access to the corporate library.

*The clauses listed in this section may vary depending on the terms of your contract. Certain benefits and conditions are usually applied to employees; Independent contractors may not be eligible for all of these benefits. Specific terms, including compensation, benefits, and terms of cooperation, will be clearly defined in your contract if it is signed.

You can learn more about the company and culture by visiting  SupportYourApp and its social pages 

If you are interested in information security, risk assessment and compliance, as well as you are attentive to details and organized, we will be glad to have your resume.

Do you have the perfect candidate in mind?  friend and get rewarded!

We adhere to the principles of equal treatment of candidates and prohibit discrimination on any grounds protected by law.

Your personal data will be processed in accordance with SupportYourApp's Notice of Candidate Processing of Personal Data.