Տեղեկատվական անվտանգության մեթոդաբանության մասնագետ

About the role

Freedom Broker Armenia is seeking an Information Security Methodology Specialist to shape and maintain its security framework. You will work closely with business owners and audit teams to ensure that security policies, standards, and processes align with international best practices and regulatory requirements.

Key responsibilities

• Develop, update, and maintain the information security methodological framework, including policies, standards, procedures, and guidelines.
• Create and manage a centralized catalog of security processes and services.
• Align ISO/IEC 27001, ISO/IEC 27002, NIST CSF, and CIS Controls with the company’s operational environment.
• Define and monitor security metrics, KPIs, and reporting mechanisms.
• Assess process maturity using O‑ISM3, CMMI and devise improvement roadmaps.
• Support the design and continuous improvement of security awareness programs.
• Collaborate with business process owners to embed security requirements.
• Prepare documentation for internal and external audits.
• Monitor regulatory changes (e.g., KVKK, SPK) and update internal documents accordingly.

Required profile

• At least 3 years of experience in information security methodology, ISMS, governance, risk or compliance.
• Deep knowledge of ISO/IEC 27001, ISO/IEC 27002 and NIST CSF.
• Proven experience drafting security policies, standards and procedures.
• Strong analytical and written communication skills, able to translate technical requirements into business language.
• Intermediate English proficiency (minimum).
• Attention to detail, organizational ability and systemic thinking.
• Relevant certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor or CISM.
• Familiarity with COBIT, ITIL and O‑ISM3 frameworks.
• Experience in the financial services or fintech sector is a plus.

Required skills

• ISO/IEC 27001
• ISO/IEC 27002
• NIST CSF
• CIS Controls
• O‑ISM3
• CMMI
• COBIT
• ITIL
• CISM certification
• Lead Implementer / Lead Auditor certification