IT Security & Compliance Manager (BMW Financial Services)

Functional responsibilities:

• Ensure compliance of IT Systems of BMW Financial Services Russia (BMW Bank, BMW Leasing) with in-country and BMW group regulations and requirements, especially in Information Security [IS] / IT Security [ITS] areas.
• Develop and deliver technical measures, processes and documentation to ensure the compliance, in close cooperation with local Information Security Manager (CISO).
• Develop local ITS/IT Compliance KPIs and provide periodic management reporting based on these KPIs.
• Coordinate ITS topics with global BMW Group ITS organization.
• Arrange/perform required ITS assessments, coordinate IT audits and manage follow-ups.
• Manage Logging & Monitoring of security events and incidents in IT Systems (SIEM/SOC).
• Manage vulnerabilities and security testing of IT Systems.
• Capture and manage IT risks, including process according to 716-P.
• Participate in business continuity and disaster recovery processes for IT systems.
• Participate in changes and projects as IT Security expert.
• Manage IT projects in the area of responsibility.
• Lead a team of IT Security operations officers, supervise implementation, operations and upgrades of IT security tools, technical protection means (СЗИ), as well as secure data transfer, payments, reporting and encryption systems.

Requirements:

• At least 10 years overall IT or IS experience
• At least 3 years in IS/ITS area in a bank
• Experience in multinational company will be a plus
• Knowledge of key Russian regulations in banking payments security, experience with its compliance implementation (including documentation)
• Experience with technologies & tools in IS/ITS area (SIEM, IAM, cryptography, DLP etc.)
• Higher technical or economical education (IT or IS area preferred)
• At least intermediate level of spoken and written English (advanced level is a plus): required for communication with English-speaking colleagues and creation of documentation in English.