Career Hackers Talent Solution - Security Portal

We enforce segregation of duties for critical security and privacy functions. This means individuals responsible for identifying threats, implementing countermeasures, ensuring privacy compliance, and managing daily infrastructure security have distinct, non-overlapping roles, reducing the risk of unauthorized actions and protecting applicant and employer interests.

Electronic media containing confidential applicant or employer information is securely purged or destroyed according to industry best practices upon disposal, with certificates of destruction obtained where applicable to ensure data is irrecoverable.

A formal inventory of all production system assets is maintained, enabling effective management, monitoring, and security of the infrastructure handling applicant assessments and employer data.

Any portable or removable media devices used for company business are encrypted and their use strictly controlled to protect sensitive applicant or employer data in case of loss or theft.

We deploy and routinely update advanced endpoint security and anti-malware technology across relevant systems to protect against malicious attacks, safeguarding the integrity of applicant data and employer accounts.

Background verification is performed on new employees, particularly those with access to sensitive systems or data, reducing insider threats and enhancing trust for both applicants and employers.

All employees and contractors acknowledge our Code of Conduct and sign Confidentiality Agreements. These documents outline ethical and security responsibilities crucial for protecting applicant data and maintaining employer trust, with violations subject to disciplinary action or contract termination.

Annual performance evaluations for employees include assessment of adherence to security policies and practices, promoting accountability in protecting applicant and employer data.

A strong password and credential management policy, including requirements for complexity, rotation, and multi-factor authentication where appropriate, is enforced for all in-scope systems, enhancing the security of access controls protecting applicant assessments and employer accounts.

Employees undergo comprehensive security awareness training upon hiring and annually thereafter, covering topics like phishing recognition, social engineering tactics, secure data handling practices, and incident reporting procedures, ensuring they are equipped to protect applicant data and employer information from evolving threats.