Consultant to Assess and Strengthen Operational Risk, Information Security (CBCG)

Job Posting Organization:
The job is posted by the United Nations Development Programme (UNDP), which is a global development network of the United Nations. Established in 1965, UNDP aims to eradicate poverty and reduce inequalities through sustainable development. It operates in approximately 170 countries and territories, working with governments and people to address development challenges. UNDP focuses on various areas including democratic governance, peacebuilding, climate change, and sustainable development. The organization employs thousands of staff worldwide, including experts in various fields, to implement its programs and initiatives effectively.

Job Overview:
The position of Consultant to Assess and Strengthen Operational Risk, security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">Information Security, and Business Continuity Framework (CBCG) is designed for an international consultant who will be responsible for evaluating and enhancing the operational risk management processes within the Central Bank of Montenegro (CBCG). The consultant will assess the current information security measures and business continuity frameworks in place, identifying vulnerabilities and areas for improvement. The role requires a comprehensive understanding of operational risk management, information security protocols, and business continuity planning. The consultant will work closely with CBCG staff to develop actionable recommendations and strategies to strengthen these critical areas, ensuring that the bank can effectively manage risks and maintain operational integrity. The assignment is expected to last for a period of 40 consultancy days, starting from May 20, 2026, to July 31, 2026, and will involve direct engagement with stakeholders to gather insights and data necessary for the assessment.

Duties and Responsibilities:
The consultant will be tasked with several key responsibilities, including: conducting a thorough assessment of the current operational risk management framework at CBCG; evaluating existing information security measures and identifying gaps; analyzing the business continuity plans to ensure they are robust and effective; engaging with CBCG personnel to gather information and insights on current practices; developing a comprehensive report detailing findings and recommendations; presenting the assessment results to CBCG management; collaborating with stakeholders to implement recommended changes; providing ongoing support and guidance during the implementation phase; and ensuring that all recommendations align with international best practices in operational risk management and information security.

Required Qualifications:
Candidates must possess a strong background in operational risk management, information security, and business continuity planning. A proven track record of working with financial institutions or central banks is highly desirable. Additionally, candidates should demonstrate excellent analytical skills, the ability to communicate complex concepts clearly, and experience in developing and implementing risk management frameworks. Familiarity with international standards and regulations related to operational risk and information security is also required. Strong interpersonal skills and the ability to work collaboratively with diverse teams are essential for this role.

Educational Background:
A minimum of a master's degree in finance, business administration, information technology, or a related field is required. Professional certifications in risk management, information security, or business continuity (such as CISSP, CISM, or ISO 22301) are highly advantageous and will be considered a strong asset for candidates applying for this position.

Experience:
Candidates should have at least 5-7 years of relevant professional experience in operational risk management, information security, or business continuity planning. Experience working with central banks or financial institutions is preferred, as is experience in conducting assessments and developing risk management frameworks. The consultant should also have a demonstrated ability to manage projects effectively and deliver results within specified timelines.

Languages:
Fluency in English is mandatory, as all documentation and communication will be conducted in English. Knowledge of Montenegrin or other regional languages is considered an asset but is not mandatory for this position.

Additional Notes:
This position is offered as a consultancy role under the UNDP procurement process, specifically as an individual contractor. The contract duration is from May 20, 2026, to July 31, 2026, encompassing a total of 40 consultancy days. The consultant will be expected to work remotely and may need to travel to Montenegro for meetings or presentations as required. Compensation will be based on the consultant's experience and qualifications, and benefits will be outlined in the contract.