Information Security Manager/Lead

Desired Candidate

The ideal candidate is a proactive and detail-oriented professional with strong leadership skills and a passion for cybersecurity. They should have excellent communication abilities to convey technical concepts to diverse audiences and a proven track record of managing teams and fostering a culture of security awareness. Adaptable and ethical, the candidate thrives in dynamic environments and collaborates effectively to address evolving cyber threats while maintaining the highest standards of confidentiality and integrity.

Responsibilities:

Strategic Planning: Develop, implement, and maintain a comprehensive cybersecurity strategy aligned with organizational goals.

Risk Management: Identify, assess, and mitigate potential cybersecurity risks and vulnerabilities across systems, applications, and networks.

Incident Response: Lead and coordinate incident response activities, ensuring quick containment, recovery, and root-cause analysis of security breaches.

Compliance and Standards: Ensure adherence to relevant regulatory standards (e.g., GDPR, ISO 27001) and internal security policies.

Team Collaboration: Lead and mentor the cybersecurity team, fostering skill development and ensuring alignment with security objectives.

Stakeholder Communication: Act as a liaison between technical teams and senior management, translating technical risks into business terms.

Continuous Improvement: Monitor and evaluate the effectiveness of security measures, and recommend enhancements to maintain a robust security posture.

Tool and Technology Management: Oversee the deployment and management of security tools (e.g., SIEM, firewalls, endpoint protection, etc.) to ensure system integrity and confidentiality.

Training and Awareness: Develop and conduct security training programs to promote awareness and compliance across the organization.

Requirements:

• Education: Bachelors or Masters degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Experience: 6-10 years of experience in cybersecurity roles with progressive leadership responsibilities.
• Certifications: CISSP (Certified Information Systems Security Professional)[Ongoing is acceptable]. Additional certifications (e.g., CISM, CEH) are a plus.
• Technical Expertise:
• Strong understanding of security architecture, protocols, and best practices.
• Experience with tools like SIEM, IDS/IPS, endpoint security, firewalls, and vulnerability management systems.
• Knowledge of cloud security (AWS, Azure, GCP) and securing hybrid environments.
• Soft Skills:
• Excellent verbal and written communication skills for technical and non-technical audiences.
• Strong leadership, project management, and team collaboration abilities.
• Analytical and problem-solving mindset with attention to detail.