IT Risk Manager

Requirements

Requirements:

• Higher education in Information Technology, Information Security, Banking, Finance, Economics, or related fields;
• At least one year of professional experience in Information Technology, Information Security, IT Audit, or IT and IS Risk Management. Experience in commercial banking will be an advantage;
• Knowledge of the fundamentals of IT and Information Security risk identification, assessment, treatment, and monitoring, as well as evaluating the effectiveness of control measures;
• Familiarity with the key principles and frameworks of COBIT, ISO/IEC 27001, ISO/IEC 27005, and ISO 31000;
• Knowledge of the fundamentals of business continuity and disaster recovery, including ISO 22301. Familiarity with the Business Continuity Institute (BCI) guidelines is desirable;
• Knowledge of the laws and regulations of the Kyrgyz Republic and the regulatory requirements of the National Bank of the Kyrgyz Republic (NBKR) related to IT and IS risk management, information security, personal data protection, and business continuity;
• Intermediate level of English proficiency.

Key Responsibilities:

• Coordinate the Information Technology (IT) and Information Security (IS) risk management process, including risk identification, assessment, treatment, and monitoring, in accordance with the Bank's approved methodology;
• Support the maintenance of the IT and IS risk register by responsible departments, coordinate the development of risk mitigation action plans, and monitor their implementation;
• Coordinate business continuity management within the scope of assigned responsibilities, including supporting Business Impact Analysis (BIA), assessing business continuity risks, and developing and updating business continuity and IT disaster recovery plans;
• Assist in organizing and conducting business continuity and disaster recovery exercises and tests, analyzing the results, and monitoring the implementation of corrective actions;
• Analyze risk-related information and prepare reports on IT and IS risks and business continuity matters for the Bank's management and relevant committees, in cooperation with responsible departments;
• Participate in the development and updating of internal methodologies, policies, and procedures related to IT and IS risk management and business continuity.

We offer:

• Employment in accordance with the Labor Code of the Kyrgyz Republic;
• Competitive salary;
• Broad opportunities for professional growth and self-development;
• A modern office located in the city center;
• Working schedule: 5/2, from 09:00 AM to 06:00 PM.