About the Company
CJSC "Investment and Credit Bank of Tajikistan" (formerly "The First MicroFinanceBank") was established in 2004 by the Aga Khan Development Network as the country's first commercial microfinance bank, with a mission to support small and medium-sized enterprises and strengthen the national economy. Over time, the Bank has expanded its presence across Tajikistan, operating branches and service centers in major cities and remote regions.
Responsibilities
•Leading the Bank's information security strategy and governance
•Overseeing the design, implementation, and continuous improvement of security policies, standards, and controls across all systems, applications, and data assets
•Assessing cybersecurity risks
•Directing incident response activities
•Coordinating vulnerability management
•Ensuring compliance with regulatory and internal requirements
•Collaborating with executive leadership, IT, risk, and business units to integrate security into business processes, support secure digital transformation, and promote a strong security culture through training and awareness
•Leading business continuity and disaster recovery planning to maintain resilience and protect critical banking operations
Requirements
•Strong background in Information Security Management and Information Security, including policy development, risk assessment, governance, and compliance
•Deep expertise in Cybersecurity, covering network security, endpoint protection, threat detection, incident response, and security operations
•Knowledge of Application Security, including secure software development practices, code review, and protection of online and mobile banking platforms
•Experience with Business Continuity planning and disaster recovery, ensuring operational resilience and continuity of critical financial services
•Advanced degree in Information Security, Computer Science, Information Technology, or a related field
•Strong knowledge of ISO 27001, NIST, PCI DSS, and cybersecurity best practices
•Proven leadership experience in financial services or a regulated industry, with the ability to manage cross-functional teams and influence senior stakeholders
•Familiarity with regional and international banking security standards and regulations, and capability to align security programs with these requirements
•Excellent analytical, communication, and decision-making skills, with fluency in English and Russian
Nice to Have
•Relevant certifications such as CISSP, CISM, or CRISC or equivalent are highly beneficial
•Knowledge of Tajik is an advantage
Conditions
No conditions are specified in the posting.
