Head of Information Security

Responsibilities

• Develop and implement the company’s information security strategy.
• Build, maintain, and continuously improve the Information Security Management System (ISMS).
• Ensure the security of corporate IT infrastructure, networks, servers, applications, and data.
• Identify, assess, and mitigate cybersecurity risks.
• Manage vulnerability assessment, security audits, and penetration testing activities.
• Organize security monitoring, incident response, and investigation processes.
• Develop and maintain internal information security policies, procedures, and standards.
• Ensure compliance with applicable regulations and international standards (e.g., ISO 27001).
• Collaborate with IT teams, internal audit, external vendors, and regulatory authorities.
• Lead information security projects and oversee the implementation of security solutions.
• Manage and develop the Information Security team.

Requirements

• Bachelor’s degree in Information Security, Information Technology, Computer Science, or a related field.
• Minimum 5 years of proven experience in Information Security within the banking sector (mandatory).
• Experience managing an Information Security team or department.
• Hands-on experience implementing and maintaining an Information Security Management System (ISMS).
• Strong knowledge of information security practices and regulatory requirements in the banking industry.
• Experience with security technologies, including: SIEM (IBM QRadar or equivalent), NGFW (Check Point, Fortinet, Juniper, etc.), WAF, DLP, PAM, VPN, Vulnerability Management solutions (Nessus, Rapid7, etc.).
• Strong understanding of network security, infrastructure protection, identity and access management, and cryptographic technologies.
• Experience developing internal security policies and procedures.
• English proficiency sufficient to read and work with technical documentation.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CEH, ISO 27001 Lead Implementer, Check Point, Cisco, Fortinet, or equivalent.
• Experience building mature information security processes in large organizations.
• Experience leading cybersecurity initiatives for critical information systems and digital transformation projects.

Personal Skills

• Strong leadership and people management skills.
• Excellent analytical and strategic thinking.
• High level of responsibility and integrity.
• Proactive and results-oriented mindset.
• Strong communication and stakeholder management skills.
• Ability to make informed decisions in a dynamic environment.

We Offer

• Competitive salary based on experience and interview results.
• Official employment in accordance with labor legislation.
• Professional growth and continuous learning opportunities.
• Collaborative and professional working environment.
• Modern office in Tashkent.
• Working schedule: Monday–Friday, 9:00 AM–6:00 PM.