Job responsibilities

• • Development of information security policy, including regulations, procedures, and manuals,
  • Development of principles for classifying information flows and their management,
  • Providing consulting on information risks and their protection to the Bank's staff and management within the scope of their authorities,
  • Monitoring of external and internal challenges threatening the Bank,
  • Analysis and assessment of threats to information assets, and development of a risk mitigation plan,
  • Participation in working groups or professional committees assessing risks during the implementation of new technologies, process improvements, technical upgrades, business environment changes, or other transformations. Addressing information security issues in the earliest stages of project development,
  • Alignment of all Bank policies and procedures to ensure successful implementation at all levels,
  • Collaboration with the Human Resources Department on information security matters, as well as staff training and awareness-raising activities,
  • Review of the reports from the organization that conducted the information security management system audit and implementation of measures to address the identified deficiencies,
  • Providing the Bank's management with information on legislative changes in the field of information security and technical innovations.

Necessary requirements

• • Higher technical education (master's or bachelor's degree): information technology (preferably network security, computer networks), applied mathematics, mathematics, radiophysics, physics
  • At least 10 years of work experience in the field of information systems and network security, with at least 5 years in the banking system
  • Profound knowledge in the field of information security
  • General knowledge of banking legislation and banking operations
  • Advanced knowledge of computers
  • Proficiency in information technologies, banking technologies inclusive
  • Profound knowledge of information security management system
  • Mastery of the implementation of the information security management system and its components
  • Knowledge of the information security standards
  • Knowledge of Russian and English languages