IT Security Manager

Job description:

JOB SUMMARY

The IT Information Security Manager is responsible for establishing, implementing, and maintaining the organization’s information security, cybersecurity, and IT risk management program.

This role is provided with:

• Independence of security oversight

• Stronger governance and audit alignment

• Clear segregation of duties between execution and control functions

• The role ensures protection of IT information assets, regulatory compliance, and alignment with enterprise risk management practices.

KEY RESPONSIBILITIES

1. Information Security Governance

• Develop and enforce information security policies, standards, and procedures

• Establish governance aligned to ISO 27001 and NIST frameworks

• Ensure alignment with company’s compliance governance and IT/ISSC oversight

2. IT Risk Management & Compliance

• Conduct IT risk assessments and maintain risk register

• Ensure compliance with Data Privacy Act and regulatory requirements

• Lead audit readiness, compliance reporting, and remediation

• Provide independent IT risk reporting to IT/ISSC and management

3. Cybersecurity Operations Oversight

• Oversee outsourced Security Operations Center (SOC)

• Manage vulnerability management, incident response, and monitoring

• Ensure effective operation of security tools (SIEM, EDR, IAM, firewalls)

4. Security Architecture & Assurance

• Define security requirements across infrastructure and applications

• Review and approve systems and solutions from a security perspective

• Ensure “security-by-design” in IT projects and transformation initiatives

5. Security Awareness & Culture

• Lead organization-wide cybersecurity awareness programs

• Promote accountability for IT and information security across business units

6. Vendor Security & Third-Party Risk

• Perform vendor security assessments and reviews

• Ensure third-party compliance with security standards

• Align IT vendor contracts with security requirements

7. Independence & Governance Alignment

• Maintain independence from IT operations while collaborating closely

• Escalate risks directly to IT/ISSC, Senior Management, and Audit when needed

• Support governance maturity through structured IT risk management

KEY ACCOUNTABILITIES

• Enterprise cyber risk posture

• IT and Security compliance with regulatory and audit requirements

• Security Incident response effectiveness

• Security maturity and awareness

• IT and Cyber Risk visibility and reporting

JOB QUALIFICATION:

Education & Experience

• Bachelor’s degree in IT, Information Security, IT Audit or related field

• 10+ years of experience in information security and IT risk management

• Experience in governance, compliance, and audit environments

Technical Skills

• Security and IT Audit

• Security tools (SIEM, EDR, IAM, firewall)

• Security frameworks (ISO 27001, NIST)

• Risk assessment, vulnerability management, incident response

• IT Audit

Leadership and Soft Skills

• Strong risk and analytical mindset

• Governance and policy development expertise

• Independence and integrity

• Strong communication and stakeholder engagement