Information Security Manager

Required Qualifications:

Key Responsibilities:

• Continuously monitor networks, endpoints, and cloud infrastructure using SIEM and security tools.
• Investigate security alerts, anomalies, and potential threats in real-time.
• Lead and coordinate incident response, including containment, remediation, and root-cause analysis.
• Maintain and update incident playbooks, ensuring swift and effective responses.
• Ensure vulnerability scanning and patch management are executed on schedule with full validation.

• Manage and optimize the configuration of SIEM, EDR, DLP, IAM, IDS/IPS, and endpoint protection platforms.
• Improve detection and alerting capabilities through regular tuning and tool enhancement.
• Ensure tools are integrated effectively across on-prem and cloud environments.

• Enforce and monitor adherence to internal security policies, procedures, and standards.
• Ensure compliance with industry frameworks and regulations such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS.
• Maintain accurate and up-to-date documentation of security controls, audits, and incidents.
• Support audit preparation and assessments, addressing gaps and remediation actions.

• Develop daily/weekly dashboards to report on security posture, incidents, patch status, and audit findings.
• Present metrics, trends, and risk insights to Head of Security & executive leadership.

• Mentor and guide junior security team members, promoting skills growth and accountability.
• Collaborate with IT, DevOps, and business units to align security with organizational goals.

• Design and deliver ongoing security training programs for staff.
• Promote a strong, security-first culture across all departments.

• Evaluate and monitor third-party vendors for potential security risks.
• Collaborate with legal and procurement teams to ensure secure contracts and SLAs are enforced.

Preferred Qualifications: