Bachelor’s in IT/InfoSec/related field; 3–5 years in information security (banking/financial sector preferred).
Working knowledge of Kazakhstan laws: Law “On Informatization,” Law “On Personal Data and Its Protection,” and ARDFM (financial regulator) requirements on information security/operational risk.
Strong analysis and communication;
ability to draft policies and procedures and deliver security awareness training.
Russian required; Kazakh preferred; English for documentation and business correspondence.