Requirements

✅ Why you are the ideal candidate for this role:

• Education: higher technical education in the field of information technologies and/or information security, or higher economic education with relevant certificates confirming knowledge and competencies in the field of information technologies and/or information security;
• At least 3 years of professional experience in information technologies and/or information security and/or IT audit and/or information security audit within the financial and/or economic sectors, and/or at least 2 years of experience in the banking sector;
• Knowledge of the legislation and other regulatory legal acts of the Kyrgyz Republic, as well as regulatory acts of the National Bank of the Kyrgyz Republic governing banking activities and banking risk management in the field of information technologies and/or information security;
• Knowledge and understanding of the International Professional Practices Framework (IPPF) of Internal Auditing, International Standards for Internal Auditing in Banks, and international standards related to the development of information technology management processes and/or information security;
• Knowledge of English (written and spoken) is an advantage.

🔧 What will your role involve:

• Making proposals and participating in the preparation of the Annual Audit Plan for information technologies and related processes, as well as for the Bank’s processes and divisions in the area of information security;
• Developing audit programs for information technologies and their processes, as well as for the Bank’s processes and divisions in the area of information security, including defining the scope and coverage of such audits;
• Identifying and applying technical approaches, new methodologies, and best practices for auditing information technologies and their processes, as well as the Bank’s processes and divisions related to information security;
• Conducting audits and assessing the adequacy and effectiveness of the internal control system over information technologies and their processes, as well as the Bank’s processes and divisions related to information security, through the review and analysis of the Bank’s internal policies, procedures, and other documents;
• Developing recommendations aimed at improving the efficiency of information technologies and their processes, as well as the Bank’s processes and divisions related to information security;
• Timely preparation and submission of audit reports on the results of audits of information technologies and their processes, as well as the Bank’s processes and divisions related to information security, to the Head of the Department and the Audit Committee;
• Monitoring the implementation of action plans approved based on the results of audits of information technologies and their processes, as well as the Bank’s processes and divisions related to information security;
• Participation in internal investigations initiated at the request of members of the Management Board and in coordination with the Bank’s Audit Committee;
• Reviewing the legislation of the Kyrgyz Republic and regulatory legal acts of the National Bank of the Kyrgyz Republic to ensure the fulfillment of the objectives and tasks of the Internal Audit Department in the area of auditing information technologies and their processes, as well as the Bank’s processes and divisions related to information security;
• Performing other activities related to the audit of information technologies and their processes, as well as the Bank’s processes and divisions in the area of information security.

We offer:

• Opportunity to become part of an international bank;
• Work in a dynamic team of like-minded professionals;
• Space for professional growth and implementation of your ideas;
• Employment in accordance with the Labor Code of the Kyrgyz Republic;
• Compensation conditions are discussed individually;
• Voluntary medical insurance;
• Modern office located in the city center;
• Work schedule 5/2, office-based work.