Job Description

Do you want to join a growing team of top professionals who invest time and effort into teaching, career growth, and cultivating employees into the next generation of IT experts? You've come to the right place.

As an Information Security Architect, you will be responsible for managing the cyber security of our client's information environment and systems. the development of the customer's overall security strategy and roadmap, helping define and execute security initiatives, and recommending new technologies, processes, and solutions to continuously strengthen the organization's cybersecurity posture.

And who are we? Span Kazakhstan is an IT company with a global reach specializing in high-quality information systems design and management services, as well as tech support for customers and enterprises. We're constantly improving, advancing, and adopting new trends, new skills, and new expertise, giving our employees virtually endless opportunities for professional development.

What you'll do:

• Establish and maintain the costumer’s vision, strategy, and security program to ensure information assets and technologies are adequately protected
• Align information security strategies with business goals and objectives
• Analyse, plan, and develop information security strategies that align with governance structures
• Identify and manage potential information security risks, including emerging threats, vulnerabilities, and control deficiencies
• Develop and oversee an information security program, including policies, procedures, and guidelines
• Participate in workshops, pre-sales engagements, and solution design activities to define tailored security approaches that meet the client needs
• Establish and maintain a comprehensive incident response plan, including identification, categorization, and management of security incidents
• Conduct security assessments and ensure regulatory compliance with NIS2, GDPR, and other relevant industry standards (e.g., ISO)

What we expect:

• At least 5+ years of experience in Cyber Security, ideally in a CISO role
• CompTIA Security+ certification or an equivalent certification, while Certified Information Security Manager (CISM) certification, GIAC Security Leadership (GSLC) certification, Information Technology Infrastructure Library (ITIL) certification is a plus
• Experience in information security governance, risk management, program development, and/or incident management
• Strong understanding of governance and technical controls focused on protecting, detecting, and responding to security issues
• Excellent communication and stakeholder engagement skills
• Proficiency in English

What's in it for you:

• Competitive salary according to your experience
• Professional certification opportunities
• Regular feedback on your performance and personalized career development plan
• International experience – opportunities to participate in international projects and work with international customers as a part of an international organization
• Opportunities to work on project with modern Microsoft technologies
• Opportunities to influence analytical solutions