Compliance

• Own information security risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology
• Form an independent view of security risk and challenge whether proposed controls address it, working directly with the Group CISO
• Assess control design and operating effectiveness across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development
• Turn risk and control data into clear, decision-ready reporting for governance forums
• Own the security risk process end to end, including assessment, treatment, acceptance, monitoring, and reporting
• Maintain the risk register and challenge risk assessments and treatment plans
• Maintain the security control framework and test controls using evidence, data, sampling, or technical validation
• Drive remediation with control owners
• Maintain the ISO 27001 ISMS, including policies and standards, Statement of Applicability, risk records, control evidence, exceptions, and key security registers
• Track control deficiencies, findings, exceptions, and remediation actions
• Define KRIs and control metrics and flag where management decisions or escalation are needed

Compliance jobs in Kazakhstan

GRC Lead