Information Security Manager

🔐 Role DescriptionAs an Information Security Manager, you will lead and coordinate information security initiatives designed to protect organizational systems, data, applications, and users from evolving cyber threats. 🛡️ You’ll work closely with technology, business, compliance, and leadership teams to strengthen security controls, manage risks, and promote a strong security-focused culture. 💻🤝Develop, maintain, and improve information security strategies, policies, standards, and procedures.Identify, assess, and manage information security risks across systems, applications, and business processes. 🔎Oversee security controls, vulnerability management, access management, and security monitoring activities.Coordinate incident response activities and support investigations, remediation, and lessons learned. 🚨Establish security awareness and training initiatives to promote responsible security practices. 🎓Monitor compliance with applicable security requirements, frameworks, policies, and internal standards.Conduct or support security assessments, audits, risk reviews, and control evaluations. 📊Collaborate with IT, engineering, HR, legal, compliance, and business teams on security initiatives.Support third-party and vendor security assessments where applicable.Develop security metrics, reports, dashboards, and recommendations for leadership. 📈Help define business continuity, disaster recovery, and security resilience requirements.Stay informed about emerging threats, vulnerabilities, technologies, and industry best practices. 🌐Drive continuous improvement of the organization’s overall security posture. 🚀🎯 QualificationsBachelor’s degree or equivalent qualification in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.Strong understanding of information security principles, risk management, security governance, and control frameworks.Knowledge of security standards and frameworks such as ISO 27001, NIST, CIS Controls, or similar. 📚Understanding of vulnerability management, identity and access management, incident response, and security monitoring.Familiarity with cloud security, network security, application security, and data protection concepts. ☁️Strong analytical, problem-solving, and risk-assessment skills. 🧠Excellent communication, leadership, stakeholder-management, and presentation skills. 💬Ability to translate technical security risks into clear business-focused recommendations.Strong attention to detail and commitment to confidentiality and information protection.Ability to manage multiple security initiatives, priorities, and deadlines effectively.Relevant professional certifications such as CISSP, CISM, CRISC, Security+, or equivalent are a plus. 🏆A proactive, ethical, and continuous-improvement mindset with a strong commitment to protecting information assets. 🛡️