Information Technology Manager

Job Title:

Location:

Department:

Reports to:

Employment Type:

Role Overview

IT Manager

hands-on IT operations

Key Responsibilities

ISO/IEC 27001 & ISMS Ownership (Core Responsibility)

• Establish, implement, maintain, and improve the

  ISMS in line with ISO/IEC 27001:2022

• Define and maintain:

• Information Security Policy

• Risk Assessment & Risk Treatment Plan (SoA)
• Asset Register & Information Classification
• Conduct

  information security risk assessments

  and periodic reviews
• Own the

  Statement of Applicability (SoA)

  and control mapping
• Coordinate and close

  internal audits, surveillance audits, and certification audits

• Manage non-conformities, corrective actions (CAPA), and continual improvement

• Lead Management Review Meetings (MRM)

  related to ISMS

Cybersecurity & Data Protection

• Implement and enforce:
• Access control policies (RBAC, least privilege)
• Endpoint security (EDR/AV)
• Network security (firewalls, VLANs, VPNs)
• Secure backups, DR & BCP testing
• Implement

  Data Loss Prevention (DLP)

  controls:
• USB/device restrictions
• Print control & logging
• Screen capture and data exfiltration controls
• Ensure secure handling of

  customer drawings, IP, defense & export-controlled data

IT Infrastructure & Operations

• Own and manage:
• Servers (on-prem / cloud), networking, Wi-Fi, email systems
• ERP systems, document management systems, HRMS
• Ensure

  high availability and uptime

  of:
• ERP
• Factory IT systems
• CNC/SCADA/IIoT interfaces
• Implement

  change management, patch management, and vulnerability management

Compliance, Policies & Documentation

• Draft, implement, and maintain:
• IT & Information Security SOPs
• Acceptable Use Policy
• Incident Response Plan
• Business Continuity & Disaster Recovery Plans
• Conduct

  security awareness training

  for employees
• Ensure compliance with customer IT/security requirements (OEM audits)
  

Incident Management

• Act as

  Incident Response Lead

• Handle and document:

• Security incidents

• Data breaches
• Root cause analysis
• Coordinate corrective and preventive actions
  

Vendor & Asset Management

• Manage IT vendors, cloud providers, AMC contracts
• Ensure

  vendor security compliance

  (NDAs, access controls, security clauses)
• Maintain IT asset inventory with ownership and classification
  

Required Qualifications

• Bachelor’s degree in

  IT / Computer Science / Information Security

• 5–10 years

  experience in IT infrastructure & security
• Hands-on experience with:
• ISO/IEC 27001 implementation or maintenance
• Risk assessment & SoA
• Internal & external audits
• Strong understanding of:
• Networking & firewalls
• Windows/Linux servers
• Cybersecurity fundamentals
• Backup & DR systems
  

Highly Preferred

• Prior role as

  ISMS Lead / ISO 27001 Coordinator

• Experience in manufacturing / engineering / defense environments

• Exposure to:

• Industry 4.0 / IIoT / factory IT

• Customer security audits (OEM / defense)
• ISO/IEC 27001 Lead Implementer or Lead Auditor certification (preferred)
  

What We Offer

• Ownership of

  organization-wide information security

• Direct involvement with top management

• Long-term role in a globally expanding manufacturing organization

• Competitive compensation aligned with responsibility and impact