Information Technology Security Manager

About the Company

Responsibilities

• ● Security Management
• ● Develop, implement, and maintain the organisation's information security strategy, policies, and standards
• ● Identify, assess, and manage cybersecurity risks across systems, applications, and infrastructure
• ● Monitor emerging threats and recommend appropriate mitigation measures
• ● Lead security incident response activities and coordinate investigations when required
• ● Conduct security assessments and recommend improvements to strengthen the organisation's security posture
• ● Promote security awareness and best practices across the organisation
• ● Risk & Compliance
• ● Ensure compliance with relevant security standards, regulations, and industry best practices
• ● Support internal and external audits, assessments, and certification activities
• ● Maintain security documentation, policies, procedures, and control frameworks
• ● Track remediation activities and ensure identified risks are addressed appropriately
• ● Assist in establishing governance processes and security controls across the organisation
• ● Security Operations
• ● Oversee vulnerability management activities, including risk reviews and remediation tracking
• ● Coordinate security testing, assessments, and vendor reviews
• ● Evaluate and implement security tools and technologies to enhance protection and monitoring capabilities
• ● Monitor security metrics and prepare reports for management
• ● Stakeholder Management
• ● Work closely with IT, engineering, operations, and business teams to integrate security into daily operations
• ● Provide security guidance and recommendations for technology initiatives and projects
• ● Support customer security reviews, questionnaires, and due diligence processes when required
• ● Act as a trusted adviser on information security matters for internal stakeholders

Requirements

• ● Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field
• ● At least 8 years of experience in information security, cybersecurity, IT risk, IT governance, or a related discipline
• ● Experience managing security programmes, policies, and operational controls
• ● Strong understanding of information security principles, risk management, and security governance
• ● Familiarity with cloud security, network security, vulnerability management, and incident response
• ● Experience working with security frameworks and compliance standards
• ● Strong analytical, problem-solving, and decision-making skills
• ● Excellent communication and stakeholder management abilities
• ● Good command of written and spoken English
• ● Preferred qualifications:
• ● Professional certification such as CISSP, CISM, CISA, Security+, CEH, or an equivalent qualification
• ● Experience working with cloud environments such as AWS, Azure, or GCP
• ● Exposure to security audits, compliance assessments, or governance programmes
• ● Experience leading cross-functional security initiatives
• ● Background in technology, software, digital services, fintech, e-commerce, or enterprise IT environments