Information Security Manager
Core
Execute and define information security strategy, managing risk, compliance, and security initiatives for a global luxury auction and financial services firm.
Role type
Senior IC Information Security Manager
Builds
Security policies, risk registers, compliance frameworks, and control validation mechanisms
Domain
Information Security / Cybersecurity / Risk Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Information security fundamentals, complex project management, risk assessment, policy development, audit coordination, compliance framework alignment, control testing, mentorship
Preferred skills
Active security certifications (CISA, CRISC, CISM, CISSP), SaaS and mobile risk assessment, incident response leadership, deep knowledge of CIS/ISO 27001/NIST frameworks
Technologies
CIS, NIST, ISO 27001, SOC 2
Responsibilities
Drive security initiatives with IT and business unit managers; lead business continuity and disaster recovery planning; lead internal and external security audits; draft and enforce security policies; conduct third-party and internal risk assessments; maintain risk registers and compliance dashboards; audit internal systems for control compliance; develop and test control validation methodologies; mentor junior analysts and engineers.
Seniority
Senior, hands-on IC