in the largest private bank in Russia.

Company considers candidates only from Russia Salary: discussed individually, social package. Work format: Remote, Office, Hybrid (Moscow, Saint Petersburg, Yekaterinburg, seasonal coworking in Sochi); Position level: Middle

🔷Tasks: Development of processes and methodology for comprehensive identification, assessment, and profiling of risks associated with personal data processing; Coordination and participation in compliance risk and information security (IS) risk assessment processes related to personal data processing (self-assessments, scenario analyses, etc.); Support and development of compliance risk and IS risk monitoring processes in the field of personal data (risk indicators, risk level control metrics, control levels, etc.); Development and coordination of operational risk event management processes related to personal data processing (verification, preparation of conclusions); Leading tasks in projects for the implementation of regulatory requirements for compliance risk management in the field of personal data processing; Development of regulatory documents for compliance risk management in the field of personal data processing; Development and generation of reporting on compliance risk in the field of personal data processing.

🔷Mandatory Requirements: Work experience of 1 year or more; Understanding of the principles of IS risk / operational risk management systems, their interrelations with IS assurance processes; Knowledge of the main regulatory requirements in the field of IS risk management (716P, GOST 57580.3); Experience interacting with IS / IT / operational risk / business units in terms of threat modeling, identification, assessment, control, and monitoring of IS risks.

We are waiting for your applications at recruiter contact