Information Security Manager

View full description

Requirements:

• Education: A bachelor's or master's degree in information security, computer science, or a comparable field.
• Certifications such as CISSP, CISM, or CRISC are a plus.
• Experience: First experience in information security, risk management, or related fields.
• Experience in conducting risk assessments and developing risk management policies is a plus.
• Knowledge: Working knowledge of information security risk management principles, standards, and best practices like ISO 27001 and NIST.
• Skills: Good analytical, problem-solving, communication, and interpersonal skills are essential.
• Technology: Familiarity with security technologies like firewalls and SIEM systems may be beneficial.
• Continuous Learning: Keeping up-to-date with latest trends and regulations in information security is crucial.
• Language: Fluency in English, both written and spoken, is required.

Responsibilities:

• Conducting information security risk assessments and identifying potential vulnerabilities and threats.
• Working with stakeholders to understand security concerns and providing guidance for managing risks.
• Developing and implementing risk management policies and procedures.
• Liaising with CISO, CSO, and Security Operations team on security requirements.
• Performing regular reviews of risk management controls and recommending improvements.
• Staying updated on industry trends and suggesting improvements to risk management frameworks.
• Collaborating with the security team to align risk management with overall security objectives.
• Maintaining and updating the organization's risk register and management documentation.
• Assisting in developing security awareness training programs for employees.
• Participating in incident response activities and providing guidance during incidents.
• Communicating effectively with stakeholders about risks and management steps.