Information Security Manager

Position Overview :

The Information Security Manager (ISM) is responsible for leading and managing the organization's overall security strategy, ensuring the protection of employees, assets, infrastructure and information.

The CSO oversees physical security, cybersecurity, risk management, and emergency response.

Key Responsibilities :

- Develop and implement comprehensive security policies and procedures.

- Secure, Manage, Monitor and Mitigate risk on our Cloud Infrastructure.

- Conduct regular risk assessments and vulnerability analyses.

- Manage and oversee security personnel, including training and development.

- Coordinate with law enforcement and other agencies as needed.

- Develop and manage budgets for security-related expenses.

- Stay up-to-date with industry trends, threats, and best practices.

- Ensure compliance with regulatory requirements and industry standards.

- Lead incident response and crisis management efforts.

- Collaborate with other departments to ensure security is integrated into business operations.

- Provide security guidance and advice to senior management and employees.

- Providing all necessary information to clients on our Security policies, and assessments and certifications.

Requirements :

- Bachelor's degree in Engineering, Security Management, Law Enforcement, or related field.

- Minimum 8 to 10 years of security experience, with 5 years in a leadership role (team lead etc.)

- Proven track record of developing and implementing effective security programs.

- Above average hands-on knowledge in any one DevSecOps, SRE, DevOps, TechOps or CloudOps

- Experience with at least one popular programming language, such as Python, Java, Kotlin, Go, Rust, Ruby, etc

- Extensive security experience with cloud services in AWS / AZURE, including establishing Control Tower type governance

- Excellent leadership, communication, and problem-solving skills.

- Ability to work in a fast-paced environment and adapt to changing circumstances.

- Excellent written and verbal communication

- Good to have security certifications like CISA, CEH, OSCP, ISO 27001 and others

Certifications :

- Certified Security Manager (CSM)

- Certified Protection Professional (CPP)

- Certified Information Systems Security Professional (CISSP)