About the job
Who Are We?
SupportYourApp is a leading international Support-as-a-Service company, providing business process outsourcing services to IT companies around the globe for over 15 years. With a dedicated team of more than 1300 professionals, we are committed to delivering exceptional technical and customer support, as well as user experience enhancement services.
Our reach extends worldwide, supporting clients in 60 languages, collaborating with industry leaders like MasterCard, Calm, and MacPaw, and developing innovative products such as Quidget to enhance the customer experience every day.
About the Position:
We are on the lookout for an Information Security Analyst eager to apply their knowledge of information security in a dynamic international IT environment. You will have the opportunity to collaborate with teams and partners from around the world while engaging in exciting and challenging projects within our Security team.
Does that sound appealing? Let's dive into the details
Your Responsibilities:
- Vendor Risk Management:
- Conducting security audits of vendors;
- Researching and gathering information from open sources (OSINT);
- Maintaining and updating risk assessment registers.
- Communication:
- Processing inquiries from other departments and clients;
- Participating in the completion and processing of client security questionnaires according to international standards (ISO 27001, SOC 2, NIST);
- Assisting in the initial review of client agreements (DPA/MSA) to identify discrepancies between internal processes and client requirements.
- Ensuring Device Compliance with Security Requirements:
- Monitoring, analyzing, and verifying evidence (logs, screenshots) to confirm employee devices meet security standards;
- Communicating with users to address security compliance issues;
- Maintaining a register of approved devices.
- Documentation and Operational Activities:
- Creating and updating internal instructions, procedures, and knowledge base materials related to information security.
- Increasing Employee Awareness on Information Security:
- Participating in phishing simulations;
- Assisting in preparing security-related materials and communications for employees.
- Incident Management:
- Initial handling of security incidents: gathering evidence, conducting basic investigations, and coordinating communication among involved parties.
Ideal Candidate Profile:
- Understanding of information security principles (Confidentiality, Integrity, Availability);
- Strong analytical and problem-solving skills;
- Ability to communicate effectively in both Ukrainian and English;
- Experience with security frameworks and standards is a plus.
