Information security risk manager

Responsible for comprehensive management of information security risks within the organization, coordinating risk assessment and mitigation, and collaborating with business and technical units.

• Systematic identification, assessment, and analysis of information security risks related to processes and IT systems.
• Developing and maintaining a Risk Management Framework (RMF) aligned with international standards (ISO 27005, NIST SP 800-30).
• Managing the Risk Register: ensuring its accuracy, analyzing control effectiveness, and recommending risk mitigation measures.
• Supporting and monitoring Risk Treatment Plans.
• Conducting Risk Assessments for changes in IT infrastructure and business processes.
• Preparing reports for management, participating in risk committees and internal audits.

• Higher education (Information Security, IT, Risk Management).
• Minimum 5 years’ experience in information security risk management.
• Knowledge of risk management methods and standards (ISO 31000, ISO 27005, NIST).
• Ability to collect, analyze, and interpret risk and vulnerability data.
• Effective interaction with technical and business units, ability to explain complex technical topics to management.
• Experience with GRC systems (Archer, RSA, ServiceNow).
• Understanding the impact of information security risks on business goals and processes
• Будет плюсом: Certifications such as CRISC, CISM, or ISO 27005 Risk Manager are a plus

• Competitive salary and bonus package.
• Opportunities for professional and career growth in one of the largest banks in the country.
• Comprehensive medical insurance (DMS).
• Employment in accordance with the legislation of the Republic of Uzbekistan.
• Work schedule: Monday–Friday, 09:00–18:00.