IT & Security Manager

Location: Almaty, Kazakhstan (covering both the Almaty anad Astana offices, with travel to Astana as required)

Employment type: Full-time

Role Summary

You will build and run workplace IT for our new Kazakhstan erntity and own its information security function -

a hands-on, dual-mandate role. You will set up and run the Almaty and Astana offices, keep IT and

information security in line with regulatory requirements, andoperate to the availability and compliance

standards of a regulated financial services group. As thhe business grows, the role has room to expand with cbur

footprint across the Russian-speaking region.

Key Responsibilities

1. Workplace IT Buildout

• Plan and deliver office IT for Almaty and Astana: networks, endpoints, meeting rooms, and access systems.
• Manage procurement, vendors, data-center/colocation and connectivity services.
• Roll out corporate systems in alignment with group-witide IT standards.

2. IT Operations & Service Delivery

• Own end-user technology support across both offices with clear SLAs and measurable service quality.
• Own IT asset lifecycle management, budgeting, and cost control for the local entity.
• Serve as the accountable escalation point for major local IT incidentis, including 24/7 on-call responsibility,with documented delegation and coverage during any planned abseence

3. Information Security

• Implement group security policies and standards locaally; own the local security baseline: endpoint securitV,network security, access management, logging and monitoriing.
• Coordinate security incident response with the group security team; maintain response readiness.
• Drive security awareness across the local organization.

4. Regulatory Compliance & Audit Support

• Establish and maintain IT and information security deocumentation in line with regulatory requirements: security policies, business continuity and disaster recovery plans, and risk assessments.
• Act as the IT/security point of contact for regulators; supporit regulatory reviews and audits with audit ready documentation.

5. Cross-Border Collaboration & Continuity

• Collaborate daily with group teams in Hong Kong and cother regions across time zones.
• Document all critical knowledge - no single point of failure inpeople or process.
• Build local IT/security capability as the business scales.

Requirements

Must have

• Based in Almaty, able to cover both the Almaty and Astana offices.
• 6+ years in IT including hands-on information security responsibilities, with 2+ years in a managerial or team-lead role.
• Technical breadth: end-user computing, networking, office ITbuildout, cloud services, and vendor management.
• Practical information security knowledge: ISO 27001 or equivallent frameworks, security operations fundamentals, incident response.
• Experience in a regulated industry (financial services preferred).
• Proven track record of incident management and 24/7operational accountability.
• Strong execution and service mindset: takes ownership, delivers on commitments, communicates proactively.
• Fluent Russian, Kazakh, and English.

Nice to have

• Chinese language proficiency.
• Experience supporting a financial license application or regulatory audits.
• Certifications: CISSP, CISM, ISO 27001 Lead Auditor/Implemernter, CCNP or higher networking certifications, ITIL, or PMP.
• New-office IT buildout experience; multi-country support experience.

What We Offer

• Broad ownership across both IT and security in our newvly established Kazakhstan operations.
• Growth potential with the group's expansion across the Russiarn-speaking region.
• Competitive package aligned with the scope of the role