Assistant General Manager- Information & Cyber Security

Role & responsibilities

About the Role

In this role, you will be at the forefront of protecting the organizations digital assets, ensuring data confidentiality, integrity, and availability. You will develop and implement security measures, monitor security systems, and respond to potential threats. You will work closely with cross-functional teams to establish best practices and compliance standards, equipping the organization with a robust information security framework. Your expertise will be critical in identifying vulnerabilities, mitigating risks, and keeping our data secure against evolving threats.

Key Responsibilities

• Design, implement, and manage the organization's information security framework, policies, and procedures
• Conduct regular risk assessments, vulnerability testing, and security audits to identify areas of improvement
• Monitor and analyze security alerts and incidents, responding to potential threats promptly to mitigate risks
• Lead incident response activities, including investigating security breaches and implementing corrective actions
• Ensure compliance with industry standards and regulations, such as ISO 27001, GDPR, and other relevant security frameworks
• Develop, maintain, and communicate security policies to promote adherence across the organization
• Conduct security awareness training sessions to educate employees on best practices and emerging threats
• Collaborate with departments to ensure security measures are integrated into daily operations
• Document security policies, incidents, and audit findings, ensuring proper record-keeping and continuity
• Prepare regular reports on the security posture, incident analysis, and remediation efforts for management review
• Identify skill gaps and training needs within the team, providing development opportunities to enhance capabilities and career growth

Key Attributes

• Strong knowledge of security frameworks and compliance requirements
• Proficiency with security tools such as SIEM, firewalls, intrusion detection/prevention systems (IDPS), and endpoint protection
• Incident response management and vulnerability assessment skills
• Familiarity with encryption technologies, access control models, and secure network architecture
• Ability to assess risks, analyze threats, and make informed decisions to protect assets
• A proactive approach to risk management, staying informed about emerging security trends
• Leadership & people management skills

Competencies

• Self Driven and Goal/Result Oriented
• Attention to Detail
• Creativity/Innovation
• Conflict Resolution
• People Management
• Decision Making/Judgment

Qualifications and Experience

• Education: Bachelors degree in Information Technology, Cybersecurity, Computer Science, or a related field. Relevant professional certifications are a plus
• Experience: 10-15 years of experience in information security or cybersecurity, with a strong background in risk management, threat analysis, and incident response; Demonstrated experience in implementing security protocols, managing incidents, and working with regulatory compliance standards
• Skills:
• Exceptional communication and interpersonal skills
• Strong attention to detail & accuracy
• Analytical and problem-solving skills