What you'll be doing
- Building, maintaining, and applying an effective and independent ICT Risk Management function in the Bank and its subsidiaries through:
- Identifying and measuring the ICT risks to which the Bank is or may be exposed;
- Performing regular assessments of changes and enhancements to regulatory requirements related to ICT risk management, including the impact of such changes on the Bank’s activities;
- Drafting advisory materials for the Management Board and Supervisory Board of the Bank to support the adoption of adequate preventive measures with regard to the rules, guidelines, standards, and best practices applicable to the Bank in the field of ICT risk management;
- Preparing reports for the CRO, the Management Board, and the Supervisory Board on relevant ICT risk management topics, including, but not limited to, the timely escalation of material risks and findings;
- Forming an independent expert view of the Bank’s ICT risk profile and challenging the decisions of the CIO, CISO, and business owners regarding cloud, outsourcing, and digital initiatives.
What you'll need to succeed
- Master’s degree in Information Technology, Cybersecurity, Information Security, Economics, or Finance, with experience in ICT risk management;
- Minimum 3 years of experience in ICT risk management, cybersecurity, information security, IT audit, or ICT governance within the banking or financial sector, experience in an independent risk or control function is considered an advantage;
- In-depth knowledge of: DORA and the applicable RTS/ITS; CRD and the EBA Guidelines on Internal Governance; ICT governance; cybersecurity; information security; cloud computing; third-party risk management; business continuity and disaster recovery; ICT change and project risk; ISO 27001/27005; the NIST Cybersecurity Framework; COBIT; ITIL; and architecture, infrastructure, applications, and data platforms;
- Preferred certifications (considered an advantage): CISA, CISM, CRISC, ISO 27001 Lead Auditor/Lead Implementer, or equivalent;
- Fluency in English, with strong analytical, organizational, and communication skills;
- Native-level proficiency in Bulgarian.
What you'll get in return
- Christmas bonus;
- Performance bonuses;
- Food vouchers;
- Preferential terms on loans;
- 25 days holiday leave;
- Аdditional holiday leave and birthday gift;
- Additional day-off for volunteering;
- Refer-A-Friend Program;
- Flexible working hours & work from home options;
- Additional health and life insurance;
- MultiSport cards and fitness centers in our Head offices;
- Corporate recreational facilities.
