Information Security Risk Manager

About the role

The Information Systems Agency of Armenia is looking for an experienced Information Security Risk Manager to lead and manage its Risk Management Team, focusing on cybersecurity risks at the national level. The role strengthens Armenia's cybersecurity resilience, develops risk management strategies and ensures compliance with regulatory requirements across public and private sector projects.

Key responsibilities

• Develop and implement an Information Security Management System (ISMS) for the agency
• Design and run risk-avoidance and risk-mitigation strategies, and assess emerging risks such as regulatory changes
• Evaluate compliance risks for critical infrastructure operators and establish standardized risk management and communication frameworks
• Analyze security reports, identify vulnerabilities and recommend remediation, and advise public and private organizations on cybersecurity requirements
• Facilitate cross-sector information sharing on policy, technical challenges and best practices
• Standardize national cybersecurity baseline controls and build a national risk classification framework covering acceptance, transfer, avoidance and mitigation
• Provide national guidance and training on cyber defense policies, security configurations and risk management frameworks
• Lead a team of experts assessing control weaknesses in digital infrastructures and monitor national cyber risk performance
• Collaborate with regulators to embed cybersecurity best practices in regulatory audits and assess the impact of cyberattacks on critical infrastructure

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field
• 5+ years of experience in information security systems or IT risk management
• Professional qualification in Information Security and Risk, such as CISSP, ISO 27001 Lead Auditor/Implementor or CRISC
• Strong analytical and problem-solving skills and excellent communication skills

Required skills

• Expert knowledge of ISMS and risk management frameworks
• Network security architecture, TCP/IP, OSI model and ITIL
• Vulnerability assessment tools (e.g. fuzzing, nmap) and penetration testing principles
• IT supply chain risk management and cyber defense audit regulations

To apply, send your CV by email to the agency's HR department; candidates meeting most of the requirements are favoured.