Information Security Engineer

Ensure that the necessary objectives are achieved in alignment with the company’s strategic plans.Monitor compliance with IT standards and ensure the governance of Information Systems Management Directorate units.Oversee Information Security Management System (ISMS) activities in accordance with international standards (ISO 27001, COBIT) and national regulations (Defense Industry Security Directive, etc.).Identify and assess risks to company assets, determine risk values, and manage information system risks.Plan and implement measures to reduce, eliminate, or transfer identified risks and threats to ensure information security.Plan and conduct internal audits related to information systems security, prepare audit reports, and coordinate with relevant units to address nonconformities.Participate in the preparation and management of Non-Disclosure Agreements (NDAs) related to services provided and received by Information Systems.Establish a recording system for information security incidents, create an incident management platform, and ensure its operation and functionality.Organize and deliver internal training to raise information security awareness among employees.Ensure that IT systems and services are maintained, updated, and audited according to ITIL guidelines, including monitoring administrator access and log records, and execute other tasks assigned by the manager within company interests.

Əsas vəzifələr

• Ensure that the necessary objectives are achieved in alignment with the company’s strategic plans.
• Monitor compliance with IT standards and ensure the governance of Information Systems Management Directorate units.
• Oversee Information Security Management System (ISMS) activities in accordance with international standards (ISO 27001, COBIT) and national regulations (Defense Industry Security Directive, etc.).
• Identify and assess risks to company assets, determine risk values, and manage information system risks.
• Plan and implement measures to reduce, eliminate, or transfer identified risks and threats to ensure information security.
• Plan and conduct internal audits related to information systems security, prepare audit reports, and coordinate with relevant units to address nonconformities.
• Participate in the preparation and management of Non-Disclosure Agreements (NDAs) related to services provided and received by Information Systems.
• Establish a recording system for information security incidents, create an incident management platform, and ensure its operation and functionality.
• Organize and deliver internal training to raise information security awareness among employees.
• Ensure that IT systems and services are maintained, updated, and audited according to ITIL guidelines, including monitoring administrator access and log records, and execute other tasks assigned by the manager within company interests.

Tələblər

• Bachelor’s or Master’s degree in Information Technology, Cybersecurity, Computer Engineering, or a related field
• Minimum 3–5 years experience in information security, IT governance, or ISMS implementation
• Strong knowledge of ISO 27001, COBIT, ITIL, and other international information security frameworks
• Experience with risk management, internal audits, and compliance reporting
• Practical experience in system monitoring, incident management, and NDA handling
• Strong analytical, problem-solving, and coordination skills
• Ability to develop and deliver internal information security training
• Familiarity with system and database administration monitoring tools and log management
• English – advanced level, Russian – preferred, Turkish – an advantage