Information Security Risk Manager

15 Июля 2026

АКИБ Ипотека-банк

Город:

Ташкент

Занятость:

Полная занятость

Опыт:

Более 6 лет

Откликнуться

Компания "АКИБ Ипотека-банк"

Responsible for comprehensive management of information security risks within the organization, coordinating risk assessment and mitigation, and collaborating with business and technical units.

Key Responsibilities:

Systematic identification, assessment, and analysis of information security risks related to processes and IT systems.
Developing and maintaining a Risk Management Framework (RMF) aligned with international standards (ISO 27005, NIST SP 800-30).
Managing the Risk Register: ensuring its accuracy, analyzing control effectiveness, and recommending risk mitigation measures.
Supporting and monitoring Risk Treatment Plans.
Conducting Risk Assessments for changes in IT infrastructure and business processes.
Preparing reports for management, participating in risk committees and internal audits.

Requirements:

Higher education (Information Security, IT, Risk Management).
Minimum 5 years’ experience in information security risk management.
Certifications such as CRISC, CISM, or ISO 27005 Risk Manager are a plus.
Technical: Knowledge of risk management methods and standards (ISO 31000, ISO 27005, NIST).
Analytical: Ability to collect, analyze, and interpret risk and vulnerability data.
Communication: Effective interaction with technical and business units, ability to explain complex technical topics to management.
Tools: Experience with GRC systems (Archer, RSA, ServiceNow).
Business-Oriented: Understanding the impact of information security risks on business goals and processes

What We Offer:

Competitive salary and bonus package.
Opportunities for professional and career growth in one of the largest banks in the country.
Comprehensive medical insurance (DMS).
Employment in accordance with the legislation of the Republic of Uzbekistan.
Work schedule: Monday–Friday, 09:00–18:00.