IT Security, Compliance & Infrastructure Manager

IT Security, Compliance & Infrastructure Manager

ISO 27001

Key Responsibilities:

• Conduct organization-wide access audits and maintain an inventory of all critical infrastructure components (AWS, GitHub, Bitrix24, etc.)
• Design and implement

  role-based access control (RBAC)

  across platforms and integrations.
• Set up and maintain secure

  credential vaults

  using tools like

  Bitwarden

  or

  1Password

  , enforcing company-wide access policies.
• Configure and manage

  VPN and Zero-Trust network access

  (e.g., Cloudflare Teams, Tailscale) ensuring system access only through approved devices.
• Oversee

  API token lifecycle management

  with timely rotation, secure storage, and revocation policies.
• Monitor backend logs, access attempts, and system events to detect suspicious activity, token misuse, or unauthorized access.
• Develop and maintain comprehensive

  Security SOPs

  , including:
• Onboarding & Offboarding checklists
• API Access Policy
• Incident Response & Breach Playbooks
• Disaster Recovery Plans
• Work closely with DevOps and PM teams to ensure secure infrastructure deployment and compliance across platforms such as Bitrix24, AWS, and CRM portals.

Extended Infrastructure Responsibilities:

• Oversee the architecture and optimization of

  global communication networks

  ,

  LAN/WAN

  , and

  network switches

  .
• Manage cloud environments and subscription governance across

  AWS

  ,

  Azure

  ,

  Google Cloud

  , and

  Office 365

  .
• Administer and secure

  Windows and Linux servers

  , including

  SharePoint

  ,

  MSSQL

  , and

  router/firewall configurations

  .
• Implement and maintain

  CI/CD pipelines

  using tools like

  TeamCity

  ,

  Octopus

  , and

  Azure DevOps

  .
• Ensure comprehensive

  system monitoring

  using tools such as

  Zabbix

  ,

  Prometheus

  , and

  Grafana

  .
• Drive infrastructure-level

  change management

  ,

  disaster recovery planning

  , and

  vendor coordination

  across locations.

Required Skills & Experience:

• 5+ years of experience in

  IT security, infrastructure, and compliance

  roles (mid-senior level preferred).
• Strong understanding of

  IAM

  ,

  VPNs

  ,

  zero-trust architecture

  , and

  network segmentation

  .
• Proven experience in

  cloud security

  , including AWS IAM, EC2, firewall rules, and key management.
• Familiarity with

  API authentication standards

  , token-based access, OAuth2, and webhook verification.
• Hands-on experience with

  Bitwarden

  ,

  1Password

  , or other enterprise credential tools.
• Strong understanding of

  ISO 27001

  ,

  GDPR

  , or equivalent regulatory frameworks.
• Practical experience in

  CI/CD tooling

  , including

  TeamCity

  ,

  Octopus

  , and

  Azure DevOps

  .
• Proficiency in infrastructure monitoring and alerting using

  Zabbix

  ,

  Grafana

  , and

  Prometheus

  .
• Sound knowledge of

  networking equipment

  ,

  Fortinet

  , and firewall administration.
• Strong documentation and policy enforcement capabilities with attention to compliance and audit readiness.

Preferred Certifications :

• CISSP

  ,

  CISM

  ,

  AWS Security Specialty

  ,

  CompTIA Security+

  , or equivalent.
• Vendor certifications in Fortinet, Microsoft, or AWS infrastructure/security.