Information Security Architect

Almaty, Kazakhstan

Do you want to join a growing team of top professionals who invest time and effort into teaching, career growth, and cultivating employees into the next generation of IT experts? You've come to the right place.

As an Information Security Architect, you will be responsible for managing the cyber security of our client's information environment and systems. the development of the customer's overall security strategy and roadmap, helping define and execute security initiatives, and recommending new technologies, processes, and solutions to continuously strengthen the organization's cybersecurity posture.

And who are we? Span Kazakhstan is an IT company with a global reach specializing in high-quality information systems design and management services, as well as tech support for customers and enterprises. We're constantly improving, advancing, and adopting new trends, new skills, and new expertise, giving our employees virtually endless opportunities for professional development.

What you'll do:

Establish and maintain the costumer’s vision, strategy, and security program to ensure information assets and technologies are adequately protected
Align information security strategies with business goals and objectives
Analyse, plan, and develop information security strategies that align with governance structures
Identify and manage potential information security risks, including emerging threats, vulnerabilities, and control deficiencies
Develop and oversee an information security program, including policies, procedures, and guidelines
Participate in workshops, pre-sales engagements, and solution design activities to define tailored security approaches that meet the client needs
Establish and maintain a comprehensive incident response plan, including identification, categorization, and management of security incidents
Conduct security assessments and ensure regulatory compliance with NIS2, GDPR, and other relevant industry standards (e.g., ISO)

What we expect:

At least 5+ years of experience in Cyber Security, ideally in a CISO role
CompTIA Security+ certification or an equivalent certification, while Certified Information Security Manager (CISM) certification, GIAC Security Leadership (GSLC) certification, Information Technology Infrastructure Library (ITIL) certification is a plus
Experience in information security governance, risk management, program development, and/or incident management
Strong understanding of governance and technical controls focused on protecting, detecting, and responding to security issues
Excellent communication and stakeholder engagement skills
Proficiency in English

What's in it for you:

Competitive salary according to your experience
Professional certification opportunities
Regular feedback on your performance and personalized career development plan
International experience – opportunities to participate in international projects and work with international customers as a part of an international organization
Opportunities to work on project with modern Microsoft technologies
Opportunities to influence analytical solutions