Job Summary
The IT Security Manager leads the organization's cybersecurity program, ensuring the protection of systems, infrastructure, and data. This role oversees security strategy, governance, risk, compliance (GRC), and operations, aligning with standards such as ISO 27001, SOC 2, PCI DSS, NIST, and data privacy regulations (e.g., GDPR).
Key Responsibilities
- Develop and manage enterprise-wide cybersecurity strategy, policies, and controls
- Ensure compliance with regulatory frameworks and lead audits and certifications
- Identify and mitigate security risks; maintain risk management frameworks
- Oversee threat monitoring, incident response, and security operations (SIEM, EDR, etc.)
- Manage vulnerability assessments, penetration testing, and patching programs
- Design and maintain secure architectures across cloud, network, and systems
- Protect sensitive data and ensure privacy compliance
- Lead security awareness training and promote a security-first culture
- Manage third-party/vendor security and risk assessments
Qualifications
- Bachelor's degree in IT, Security, or related field (Master's preferred)
- 8–12+ years of experience, with 5+ years in a leadership role
- Strong experience with ISO 27001, SOC 2, PCI DSS, and NIST frameworks
- Expertise in security operations, risk management, and incident response
- Hands-on experience with SIEM, EDR/XDR, and vulnerability tools
Key Skills
Cybersecurity leadership, risk assessment, incident response, cloud security, compliance, and strong stakeholder communication
Preferred Certifications
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- ISO 27001 Lead Implementer / Lead Auditor
- CEH, GIAC, or equivalent technical certifications
