Cybersecurity & Information Security Specialist

About the role

EasyPay is seeking a dedicated Cybersecurity & Information Security Specialist to protect the financial data of its users. The role involves monitoring threats, improving security processes, and ensuring compliance with industry standards.

Key responsibilities

• Monitor and analyze cybersecurity events, alerts, and incidents, providing timely investigation and response.
• Support the implementation, operation, and continuous improvement of the company’s Information Security Management System (ISMS).
• Perform security risk assessments and vulnerability assessments, coordinating remediation activities.
• Monitor the effectiveness of technical and organizational security controls.
• Participate in security audits, compliance assessments, and regulatory reviews.
• Develop, maintain, and update information security policies, procedures, standards, and guidelines.
• Review access management processes and support identity and access control activities.
• Collaborate with IT, Infrastructure, Product, Development, Risk, Compliance, and Business teams to ensure secure implementation of systems and projects.
• Assist in third‑party security assessments and vendor risk evaluations.
• Support business continuity and disaster recovery initiatives from an information security perspective.
• Deliver cybersecurity awareness activities and promote security best practices across the organization.

Required profile

• Degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
• 2–5 years of professional experience in cybersecurity, information security, or IT security.
• Strong analytical, problem‑solving, and communication skills.
• Ability to manage multiple priorities and work effectively with cross‑functional teams.
• Fluent in written and spoken Armenian and English.

Required skills

• Information Security Management Systems (ISMS)
• Cybersecurity principles and best practices
• Network and endpoint security
• Identity and Access Management (IAM)
• Security monitoring and incident response
• Vulnerability management
• Risk assessment methodologies
• ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, PCI DSS
• SIEM, EDR, firewalls, endpoint protection, vulnerability scanners, email security solutions
• Microsoft security technologies (advantage)
• Cloud security concepts (plus)