IT & Security Manager (Information Security)

TL;DR

IT & Security Manager (Information Security): Building and running workplace IT and the local information security function for regulated financial operations in Kazakhstan with an accent on office infrastructure, security controls, and regulatory compliance. Focus on securing endpoints and networks, managing incident response and audits, and maintaining reliable 24/7 IT operations across two offices.

Location: Must be based in Almaty and able to cover the Almaty and Astana offices, including travel to Astana as required.

Company

TICKRS FINANCIAL LIMITED is a regulated financial services group establishing new operations in Kazakhstan.

What you will do

• Plan, deploy, and operate IT infrastructure for the Almaty and Astana offices, including networks, endpoints, meeting rooms, access systems, connectivity, and corporate platforms.
• Manage procurement, vendors, colocation and data-center services, IT assets, budgets, and cost control.
• Own end-user support and service delivery across both offices, including SLAs, incident escalation, and 24/7 on-call coverage.
• Implement local information security controls covering endpoint security, network security, access management, logging, monitoring, and incident response.
• Maintain security policies, business continuity and disaster recovery plans, risk assessments, and audit-ready documentation.
• Coordinate with group teams in Hong Kong and other regions, support regulatory reviews, and build local IT and security capability.

Requirements

• Based in Almaty and able to cover both the Almaty and Astana offices.
• 6+ years of IT experience, including hands-on information security responsibilities and at least 2 years in a managerial or team-lead role.
• Experience with end-user computing, networking, office IT buildouts, cloud services, vendor management, and IT operations.
• Practical knowledge of ISO 27001 or equivalent frameworks, security operations fundamentals, and incident response.
• Experience in a regulated industry, preferably financial services, with accountability for incidents and 24/7 operations.
• Fluent Russian, Kazakh, and English.

Nice to have

• Chinese language proficiency.
• Experience with financial license applications or regulatory audits.
• CISSP, CISM, ISO 27001 Lead Auditor or Implementer, CCNP or higher, ITIL, or PMP certification.
• New-office IT buildout and multi-country support experience.

Culture & Benefits

• Broad ownership across workplace IT and information security for newly established Kazakhstan operations.
• Growth potential as operations expand across the Russian-speaking region.
• Competitive compensation aligned with the scope of the role.