Position overview
DataArt is looking for an experienced cybersecurity lead who would consult our clients on cybersecurity strategy, perform security and risk assessments, ensure compliance with regulatory requirements, create policies and perform other relevant activities. You will work as part of the DataArt’s security consulting team.
Responsibilities
- Develop and implement cybersecurity strategies tailored to the organization’s needs
- Conduct risk assessments to identify vulnerabilities and recommend appropriate security measures
- Provide expert guidance on security policies, procedures, and best practices
- Oversee the development and implementation of incident response plans
- Review and evaluate existing security tools and technologies, making recommendations for enhancements or replacements as necessary
- Engage with stakeholders to provide strategic advice on security-related projects
- Monitor security trends and emerging threats, providing insights and recommendations to the client’s executive team
- Collaborate with IT and other departments to ensure the integration of security into the overall business strategy and operations
Requirements
- Ability to manage multiple projects simultaneously and switch contexts quickly
- Strong analytical and problem-solving skills, with the ability to assess and evaluate new security technologies and solutions rapidly
- Minimum 5 years of professional experience in information security, with a focus on risk management, compliance, and security architecture
- Extensive knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, PCI-DSS) and best practices
- Proficiency in security tools and technologies, including firewalls, intrusion detection systems, endpoint protection, and SIEM solutions
- Familiarity with network security protocols, application security practices, and incident response methodologies
- Experience with cloud security and familiarity with cloud service providers (AWS, Azure, Google Cloud) and their security offerings.
- Strong interpersonal skills with the ability to collaborate effectively with cross-functional teams and engage with stakeholders at all levels
- Proven track record of providing strategic guidance and recommendations to executive leadership on cybersecurity initiatives
- Fluent in English, with excellent verbal and written communication skills
Nice to have
- Relevant certifications such as CISSP, CISM, CISA, or equivalent
- Knowledge of secure software development practices and familiarity with DevSecOps methodologies
- Understanding of data privacy laws and regulations, including GDPR and HIPAA