Chief information security officer in banking

CJSC “Investment and Credit Bank of Tajikistan” (formerly “The First MicroFinanceBank”) was established in 2004 by the Aga Khan Development Network as the country’s first commercial microfinance bank, with a mission to support small and medium-sized enterprises and strengthen the national economy. Over time, the Bank has expanded its presence across Tajikistan, operating branches and service centers in major cities and remote regions.

• leading the Bank’s information security strategy and governance
• oversees the design, implementation, and continuous improvement of security policies, standards, and controls across all systems, applications, and data assets
• assessing cybersecurity risks
• directing incident response activities
• coordinating vulnerability management
• ensuring compliance with regulatory and internal requirements
• collaborates with executive leadership, IT, risk, and business units to integrate security into business processes, support secure digital transformation, and promote a strong security culture through training and awareness
• leads business continuity and disaster recovery planning to maintain resilience and protect critical banking operations

• Strong background in Information Security Management and Information Security, including policy development, risk assessment, governance, and compliance.
• Deep expertise in Cybersecurity, covering network security, endpoint protection, threat detection, incident response, and security operations.
• Knowledge of Application Security, including secure software development practices, code review, and protection of online and mobile banking platforms.
• Experience with Business Continuity planning and disaster recovery, ensuring operational resilience and continuity of critical financial services.
• Advanced degree in Information Security, Computer Science, Information Technology, or a related field;
• Strong knowledge of ISO 27001, NIST, PCI DSS, and cybersecurity best practices
• Proven leadership experience in financial services or a regulated industry, with the ability to manage cross-functional teams and influence senior stakeholders.
• Familiarity with regional and international banking security standards and regulations, and capability to align security programs with these requirements.
• Excellent analytical, communication, and decision-making skills, with fluency in English and Russian;
• Будет плюсом: relevant certifications such as CISSP, CISM, or CRISC or equivalent are highly beneficial; knowledge of Tajik is an advantage

• Условий в вакансии нет