Participation in the processes of compliance with the requirements of the PCI DSS standardMaintaining enterprise information security policies, technical standards, guidelines, and procedures necessary to support information security in compliance with established company policies, regulatory requirements, and generally accepted information security controls.Researching compliance issues/questions for existing and new regulations, and providing interpretation or clarification within the team.Oversight and assurance of compliance to technical requirements.Providing advice on interpretation of technical requirements.Managing compliance related events and incidents.Working with external labs to complete certification requirementsManage / assist with regulatory notifications and submissions.Assess product compliance, operational risks, and scheduling of compliance tasks.Reviews and audits to test existing compliance efforts are fit for purpose.Review and update internal policies and operational procedures as required.

Providing information security for the branch.Maintenance of the RB systemMaintenance of software and hardware complexes (AWP KBR, PTK PDS) in terms of the use of cryptographic information protection means (CIPF Signatura, Verba)Maintenance of systems for transmitting information in electronic form using CIPF (Blizko, Argos, AHML, etc.) production, re-release, accounting, installation of electronic signature verification keys.Monitoring, control of means of words and information security events (DLP, antivirus tools, monitoring and inventory system, vulnerability detection system, information security incident response center)Information security trainingDevelopment of regulatory documents in the field of information security in order to comply with regulatory requirements.

Coordination of the activities of employees of the information security department;Control and monitoring of the state of information security (R-Vision);Information security events and incidents handling (QRadar SIEM);Preparation of training courses on information security (Adobe Connect);Accounting for information security risks (R-Vision);Self-assessments: STO BR IBBS-2014, NPS-382;Preparation of regulatory documents in accordance with the requirements of STO BR IBBS-2014, NPS-382;Analysis of existing protective measures, development of documents, selection of protective measures;Department budget planning;Negotiating with contractors;

- organization of the activities of the Certification Center of the Bank;- development and implementation of organizational and technical measures to ensure the security of the Certification Center and other systems of the Bank;- organization, provision and control of information security during the implementation of interaction with customers by the Bank's employees within the framework of the remote banking system;- organization, provision and control of information security when using means of cryptographic protection of information by the Bank's divisions;- organization, provision and control of information security in exchange with the Central Bank of the Russian Federation within the framework of concluded agreements;- support for cryptographic information protection systems: CryptoPro, Verba-OW, Signature, etc.- maintenance of the life cycle of certificates of electronic signature keys;- budget planning, conducting the process of concluding contracts with counterparties;- participation in procurement on a tender basis.

Development of documentation for working with crypto keys.Providing technical support to users of crypto keys.CA administration.Maintaining the full life cycle of crypto keys.Development of documentation for the work of the subscriber department.Study and further adjustment of the department's work in accordance with the legal framework in the field of information protection.Monitoring the functioning of the certification center;Participation in procurement on a tender basis;