Consultant for Operational Risk, Information Security and Business Continuity

Job Posting Organization:
The job is posted by the United Nations Development Programme (UNDP), which is a global development network of the United Nations. Established in 1965, UNDP aims to eradicate poverty and reduce inequalities through sustainable development. The organization operates in approximately 170 countries and territories, working with governments and people to address development challenges. UNDP focuses on various areas including democratic governance, peacebuilding, climate change, and sustainable development. The organization employs thousands of professionals worldwide, contributing to its mission of promoting human development and fostering resilient societies.

Job Overview:
The position of Consultant for Operational Risk, security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">Information Security and Business Continuity involves the operationalization of the Operational Risk, Information Security, and Business Continuity Management Framework for the Central Bank of Montenegro (CBCG). The consultant will be responsible for implementing strategies that ensure the bank's resilience against operational risks and security threats. This role requires a deep understanding of risk management principles, information security protocols, and business continuity planning. The consultant will work closely with various stakeholders within the CBCG to assess current practices, identify gaps, and propose actionable solutions. The assignment is expected to span from November 1, 2026, to October 31, 2027, with a total of 96 consultancy days allocated for the project. The consultant will need to submit proposals through the UNDP's supplier portal, adhering to the guidelines provided.

Duties and Responsibilities:
The consultant will be tasked with several key responsibilities, including but not limited to:

• Conducting a comprehensive assessment of the existing Operational Risk, Information Security, and Business Continuity Management Framework at CBCG.
• Developing and implementing strategies to enhance the framework, ensuring alignment with international best practices and standards.
• Collaborating with CBCG staff to identify potential operational risks and vulnerabilities, and recommending mitigation strategies.
• Designing and facilitating training sessions for CBCG personnel on risk management, information security, and business continuity practices.
• Preparing detailed reports and documentation outlining findings, recommendations, and progress made during the consultancy period.
• Engaging with stakeholders to promote awareness and understanding of operational risk and information security issues.
• Providing ongoing support and guidance to CBCG in the implementation of the revised framework throughout the consultancy period.

Required Qualifications:
Candidates must possess a strong background in operational risk management, information security, and business continuity planning. A proven track record of working with financial institutions or similar organizations is essential. Additionally, candidates should demonstrate excellent analytical and problem-solving skills, as well as the ability to communicate complex concepts effectively to diverse audiences. Familiarity with international standards and frameworks related to risk management and information security is highly desirable. Candidates should also exhibit strong project management skills, with the ability to manage multiple tasks and meet deadlines.

Educational Background:
A minimum of a Master's degree in a relevant field such as Business Administration, Risk Management, Information Security, or a related discipline is required. Professional certifications in risk management or information security (e.g., CISSP, CISM, CRISC) will be considered an asset. Candidates should have a solid understanding of the regulatory environment governing financial institutions and the implications for operational risk and information security.

Experience:
The ideal candidate should have at least 5-7 years of relevant professional experience in operational risk management, information security, or business continuity planning. Experience working with central banks or financial institutions is highly preferred. The candidate should also have a demonstrated ability to lead projects and initiatives in a consulting capacity, showcasing their expertise in developing and implementing risk management frameworks.

Languages:
Fluency in English is mandatory, as all documentation and communication will be conducted in this language. Knowledge of Montenegrin or other regional languages would be considered an advantage, as it may facilitate better communication with local stakeholders.

Additional Notes:
This consultancy position is classified as an individual contractor role, and the contract duration is set for one year, from November 1, 2026, to October 31, 202

• The consultant will be expected to work on a part-time basis, dedicating a total of 96 consultancy days throughout the contract period. The position is open to both national and international candidates, and compensation will be commensurate with experience and qualifications. Interested candidates must submit their proposals through the UNDP supplier portal by the specified deadline.