Information Security Risk Manager
Responsible for comprehensive management of information security risks within the organization, coordinating risk assessment and mitigation, and collaborating with business and technical units.
Key Responsibilities:
-
Systematic identification, assessment, and analysis of information security risks related to processes and IT systems.
-
Developing and maintaining a Risk Management Framework (RMF) aligned with international standards (ISO 27005, NIST SP 800-30).
-
Managing the Risk Register: ensuring its accuracy, analyzing control effectiveness, and recommending risk mitigation measures.
-
Supporting and monitoring Risk Treatment Plans.
-
Conducting Risk Assessments for changes in IT infrastructure and business processes.
-
Preparing reports for management, participating in risk committees and internal audits.
Requirements:
-
Higher education (Information Security, IT, Risk Management).
-
Minimum 5 years’ experience in information security risk management.
-
Certifications such as CRISC, CISM, or ISO 27005 Risk Manager are a plus.
-
Technical: Knowledge of risk management methods and standards (ISO 31000, ISO 27005, NIST).
-
Analytical: Ability to collect, analyze, and interpret risk and vulnerability data.
-
Communication: Effective interaction with technical and business units, ability to explain complex technical topics to management.
-
Tools: Experience with GRC systems (Archer, RSA, ServiceNow).
-
Business-Oriented: Understanding the impact of information security risks on business goals and processes
What We Offer:
-
Competitive salary and bonus package.
-
Opportunities for professional and career growth in one of the largest banks in the country.
-
Comprehensive medical insurance (DMS).
-
Employment in accordance with the legislation of the Republic of Uzbekistan.
-
Work schedule: Monday-Friday, 09:00-18:00.