Information Security Risk Manager​

Responsible for comprehensive management of information security risks within the organization, coordinating risk assessment and mitigation, and collaborating with business and technical units.​

​

Key Responsibilities:​

-

Systematic identification, assessment, and analysis of information security risks related to processes and IT systems.​

-

Developing and maintaining a Risk Management Framework (RMF) aligned with international standards (ISO 27005, NIST SP 800-30).​

-

Managing the Risk Register: ensuring its accuracy, analyzing control effectiveness, and recommending risk mitigation measures.​

-

Supporting and monitoring Risk Treatment Plans.​

-

Conducting Risk Assessments for changes in IT infrastructure and business processes.​

-

Preparing reports for management, participating in risk committees and internal audits.​

Requirements:​

-

Higher education (Information Security, IT, Risk Management).​

-

Minimum 5 years’ experience in information security risk management.​

-

Certifications such as CRISC, CISM, or ISO 27005 Risk Manager are a plus.​

-

Technical: Knowledge of risk management methods and standards (ISO 31000, ISO 27005, NIST).​

-

Analytical: Ability to collect, analyze, and interpret risk and vulnerability data.​

-

Communication: Effective interaction with technical and business units, ability to explain complex technical topics to management.​

-

Tools: Experience with GRC systems (Archer, RSA, ServiceNow).​

-

Business-Oriented: Understanding the impact of information security risks on business goals and processes

What We Offer:​

-

Competitive salary and bonus package.​

-

Opportunities for professional and career growth in one of the largest banks in the country.​

-

Comprehensive medical insurance (DMS).​

-

Employment in accordance with the legislation of the Republic of Uzbekistan.​

-

Work schedule: Monday–Friday, 09:00–18:00.