Manager securitatea informatiei

ncident handling, which assumes the following responsibilities:
• Deal with incoming reports that affect the constituency and pass them on, as appropriate, to the sites affected within the constituency and/or CERT-GOV-MD partners;
• Examine log files;
• Identify affected sites;
• Point to technical documents or advisories;
• Provide technical support;
• Provide workarounds and fixes;
• Point to resources that provide or can help establish appropriate points of contact;
• Provide a list of appropriate points of contact;
• Undertake contact of other parties affected in the incident and law enforcement agencies;
2. Announcement:
• Disclose information to the constituency (in form of security news, alerts, advisories or guidelines), to assist them in protecting their systems, or to look for possible signs of attack by providing notification of potential, current, or recent threats; and further to suggest methods to detect, recover from, or prevent threats.
Additional responsibilities, which might be assigned:
• Participate in internal audits of the information security management system. This includes: review of security controls, risk assessments, vulnerabilities scanning and penetration testing to determine the compliance with standards and security policy. Recommend appropriate action to management.
• Participate in development of security policy, procedures, instructions and guidelines.
• Participate in seminars, conferences and/or trainings.
• Assess information security related software and hardware systems.
• Manage the day-to-day operations of the CERT security solutions and instruments. This includes monitoring, policy tuning, troubleshooting, patching and creation of custom signatures.