IT & Information Security Risk Manager

Develop and maintain IT Risk Management frameworks, policies, and procedures across SOCAR and SOCAR Group entitiesIntegrate IT, Information Security, Operational Technology (OT), and digital risks into SOCAR’s Enterprise Risk Management (ERM) frameworkSupport risk assessments for IT infrastructure, applications, cloud services, operational technology, third-party providers and emerging technologiesMonitor IT and information security risk registers, mitigation actions and remediation activitiesSupport Risk and Control Self-Assessment (RCSA) processesMonitor compliance with internal policies and industry standards, including COBIT, NIST, ISO 27001, ISO 31000 and ITILAssess IT General Controls, monitor IT incidents and support root cause analysisPrepare risk reports, dashboards, KRIs and analytical summaries for senior management Xüsusi tələblər Bachelor's degree in Information Technology, Information Security, Computer Science, Risk Management, or a related fieldMinimum 3 years of professional experience in IT Risk Management, IT Audit, Information Security, Software Development, or a related fieldFluency in Azerbaijani and Upper-Intermediate level English proficiencyStrong understanding of IT risk management principles, information security controls, and enterprise risk management practicesKnowledge of internationally recognized frameworks and standards, including COBIT, NIST, ISO 27001, ISO 31000, and ITILExperience in the oil & gas, energy, petrochemical, utilities, mining, manufacturing, or other asset-intensive industries will be considered an advantageProfessional certifications such as CRISC, CISA, CISSP, CGEIT, CISM, ISO 27001, ISO 31000, or ITIL Foundation will be considered an advantage Müraciət etmək üçün: [email protected]