Manager, IT Security

The Manager, IT Security is responsible for leading the strategy, governance, and day-to-day operations of the organization's IT Security program across the company. This role provides both strategic direction and hands-on leadership for security operations, risk management, compliance, and incident response, ensuring the confidentiality, integrity, and availability of information systems. The Manager leads a team of IT Security specialists, sets security policy and standards, and partners closely with IT, OT, Cybersecurity and business, to embed security into every technology and business initiative. Develop, own, and continuously refine the enterprise IT security strategy, roadmap, and reference architecture aligned with ISO 27001, NIST, and applicable national/industry regulations. Lead, mentor, and manage the IT Security team (Senior Specialists and Specialists), including workload planning, performance management, capability development, and succession planning. Direct the implementation and administration of enterprise security technologies, including firewalls, IDS/IPS, endpoint protection, anti-malware, email security gateways, SIEM, vulnerability management, and Privileged Access Management (PAM) solutions. Oversee enterprise risk assessments, vulnerability management programs, and penetration testing exercises; prioritize, track, and report on remediation of identified risks. Own the organization's security incident response program - lead major incident and breach response, forensic investigations, root cause analysis, and post-incident reviews. Establish, maintain, and regularly test disaster recovery (DR) and business continuity plans (BCP) for security critical systems and services. Develop, approve, and enforce information security policies, standards, procedures, and guidelines across the organization; drive ongoing security awareness and training programs for all employees. Ensure compliance with applicable regulatory, contra