Information Security Manager

We are looking for an experienced Information Security Manager to develop and manage the organizations information security program, IT governance, risk management, disaster recovery, and business continuity initiatives. Post : Information Security Manager Job

Experience

7+ Years

Employment Type

Full-Time Job Summary We are looking for an experienced Information Security Manager to develop and manage the organizations information security program, IT governance, risk management, disaster recovery, and business continuity initiatives. The role will ensure the confidentiality, integrity, and availability of information systems while maintaining compliance with applicable security standards and regulations. Key Responsibilities Develop, implement, and maintain the organization-wide Information Security Program. Establish and enforce information security policies, standards, and procedures. Manage IT governance, risk assessment, risk mitigation, and security compliance . Develop and maintain Disaster Recovery (DR) and Business Continuity Plans . Conduct security audits and information security assessments. Monitor and investigate security incidents, breaches, vulnerabilities, and threats. Manage security projects from requirements and planning through implementation and deployment. Evaluate and recommend new security technologies and solutions. Monitor security performance and prepare regular security metrics and reports. Support compliance with applicable regulatory and legal requirements. Technical Skills Required Strong knowledge of ISO 27001, NIST, and CIS Controls . Experience in Security Governance & Risk Management . Strong understanding of Firewalls, VPN, IDS/IPS, Proxy, NAC, VLAN and Network Segmentation . Knowledge of Zero Trust, IPsec, SSL/TLS and network monitoring . Experience with Antivirus, EDR/XDR, endpoint hardening and patch management . Knowledge of Windows, Linux and VMware/Hyper-V environments. Cloud security experience in Microsoft Azure, AWS or Google Cloud . Knowledge of Azure AD, IAM, SSO, MFA, RBAC and PAM . Experience with SIEM platforms such as Splunk, Microsoft Sentinel or QRadar . Strong understanding of SOC operations, threat detection and incident response . Knowledge of DLP, encryption, secure backup and disaster recovery . Familiarity with OWASP Top 10, WAF, API Security, vulnerability assessment and penetration testing . Understanding of DevSecOps and security integration into CI/CD pipelines . Knowledge of digital forensics, root-cause analysis and incident reporting.

Desired Candidate Profile

B.Sc. in a technology-related discipline such as: Computer Science Information Management Computer Engineering Cybersecurity Or equivalent qualification Minimum 7 years of experience working directly in Information Security or Information Technology. Hands-on experience in developing or managing Risk Management Programs is mandatory . IT Internal Audit experience will be an advantage. Excellent English communication skills. Certifications Desirable CISSP CISA CompTIA Security+ CCNA Equivalent Information Security certification