IT Security Manager

Your role

• Security Policy Development: Create and maintain comprehensive security policies, standards, and procedures to safeguard the organization’s information systems. 

• Incident Response Management: Lead the response to security incidents, ensuring timely resolution and documentation of incidents while coordinating with relevant teams. 

• Risk Assessment: Conduct regular risk assessments to identify vulnerabilities within the organization’s infrastructure and recommend appropriate mitigation strategies. 

• Security Awareness Training: Develop and implement training programs to educate employees on security best practices, ensuring compliance with established protocols. 

• Vendor Management: Collaborate with third-party vendors to assess their security measures, conduct site visits, and ensure compliance with organizational standards. 

• Compliance Support: Assist in audits and assessments by providing necessary documentation and evidence related to security controls and practices. 

• Reporting & Metrics: Generate regular reports on the organization’s security posture, including vulnerability management metrics, incident response statistics, and compliance status. 

• Collaboration & Communication: Work closely with cross-functional teams to promote a culture of security awareness throughout the organization. Serve as a point of contact for all security-related inquiries. 

• Continuous Improvement: Stay updated on emerging threats and trends in cybersecurity. Recommend improvements to existing processes based on industry best practices. 

To succeed in this role

• Bachelor’s degree in Information Security, Computer Science, or a related field. 

• Proven experience in information security management or a similar role. 

• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001). 

• Excellent analytical skills with the ability to assess complex situations. 

• Strong communication skills for effective collaboration across departments. 

• Relevant certifications (e.g., CISSP, CISM) are preferred but not mandatory.