Methodology IT Security Specialist

Description

Freedom Broker Armenia is a leading financial services company providing brokerage and investment solutions in the Armenian market. We are committed to maintaining high standards of cybersecurity, regulatory compliance, and operational resilience while delivering innovative financial services to our clients. As part of our growing information security team, we are looking for a Methodology IT Security Specialist to support and enhance our governance, methodology, and process management practices.

Responsibilities

• Develop, update, and maintain the company’s information security methodology framework, including policies, standards, procedures, and guidelines
• Create and maintain a centralized catalog of information security processes and services
• Adapt international standards and best practices, including ISO/IEC 27001, NIST CSF, and CIS Controls, to the company’s operational environment
• Develop and maintain information security metrics, KPIs, and reporting mechanisms
• Assess the maturity of information security processes using frameworks such as O-ISM3 and CMMI, and prepare improvement roadmaps
• Participate in the design and continuous improvement of Security Awareness programs for employees
• Collaborate with business process owners to integrate information security requirements into business operations
• Prepare methodological materials and supporting documentation for internal and external audits
• Monitor regulatory and compliance changes, including KVKK and SPK requirements, and ensure timely updates to internal documentation

What matters to us

• 3+ years of experience in information security methodology, ISMS, governance, risk, or compliance
• Strong knowledge of ISO/IEC 27001, ISO/IEC 27002, and NIST CSF frameworks
• Hands-on experience developing information security policies, standards, procedures, and related documentation
• Good understanding of process-oriented management approaches and management systems
• Excellent structured writing and analytical skills, with the ability to translate technical requirements into clear business language
• English proficiency at Intermediate level or higher
• Strong attention to detail, organizational skills, and systems-thinking mindset
• Certifications such as ISO/IEC 27001 Lead Implementer / Lead Auditor or CISM
• Knowledge of COBIT, ITIL, and O-ISM3 frameworks
• Experience working with process maturity assessment models
• Previous experience in the financial services or fintech sector
• Knowledge of Armenian and Russian