Information Security Risk Manager​

Responsible for comprehensive management of information security risks within the organization, coordinating risk assessment and mitigation, and collaborating with business and technical units.​

​

Key Responsibilities:​

• Systematic identification, assessment, and analysis of information security risks related to processes and IT systems.​

• Developing and maintaining a Risk Management Framework (RMF) aligned with international standards (ISO 27005, NIST SP 800-30).​

• Managing the Risk Register: ensuring its accuracy, analyzing control effectiveness, and recommending risk mitigation measures.​

• Supporting and monitoring Risk Treatment Plans.​

• Conducting Risk Assessments for changes in IT infrastructure and business processes.​

• Preparing reports for management, participating in risk committees and internal audits.​

Requirements:​

• Higher education (Information Security, IT, Risk Management).​

• Minimum 5 years’ experience in information security risk management.​

• Certifications such as CRISC, CISM, or ISO 27005 Risk Manager are a plus.​

• Technical: Knowledge of risk management methods and standards (ISO 31000, ISO 27005, NIST).​

• Analytical: Ability to collect, analyze, and interpret risk and vulnerability data.​

• Communication: Effective interaction with technical and business units, ability to explain complex technical topics to management.​

• Tools: Experience with GRC systems (Archer, RSA, ServiceNow).​

• Business-Oriented: Understanding the impact of information security risks on business goals and processes

What We Offer:​

• Competitive salary and bonus package.​

• Opportunities for professional and career growth in one of the largest banks in the country.​

• Comprehensive medical insurance (DMS).​

• Employment in accordance with the legislation of the Republic of Uzbekistan.​

• Work schedule: Monday–Friday, 09:00–18:00.