Information Security Manager
Core
Develop and implement security policies, manage risk registers, lead incident response, and oversee audits/certifications to protect corporate digital assets and IT infrastructure.
Role type
Information Security Manager
Builds
Security posture, compliance frameworks (ISO 27001, SOC 2), and secure IT operations
Domain
Enterprise IT Security / Cloud Security / Compliance
Required skills
Security policy management, risk assessment and mitigation, incident response, audit and certification management, vendor security assessment, security awareness training, regulatory compliance knowledge
Preferred skills
ISO 42001 experience, data governance in US/EU/AU/CA, CISM/CISSP/CRISC certifications, SaaS and multi-tenant environment experience
Technologies
ISO 27001, ISO 27701, SOC 2, ISO 42001
Responsibilities
Develop and maintain security policies and procedures; assess vulnerabilities and maintain risk registers; manage security incidents and recovery; conduct internal and external audits for certifications; manage vendor onboarding and security assessments; deliver security awareness training
Seniority
Senior, hands-on IC with management responsibilities