Information Technology Security Manager

Position Overview

We seek an experienced IT Security Manager to lead and support cybersecurity efforts across various application and technology projects. This role encompasses overseeing security implementation, governance, compliance, testing, and fostering strong communication with stakeholders to ensure that all solutions align with internal security mandates and industry benchmarks.

Key Responsibilities

• Facilitate and support cybersecurity initiatives, embedding security requirements into application deployments.
• Interpret project and bid specifications into precise cybersecurity needs and practical use cases.
• Evaluate and effectively convey the organization's cybersecurity status to both internal teams and external partners.
• Lead coordination and execution of security assessments, reviews, testing protocols, and audit procedures.
• Oversee monitoring of security compliance, handle alerts and findings, and manage remediation actions.
• Maintain comprehensive security documentation and gather audit evidence to uphold governance and compliance standards.
• Periodically review and refine cybersecurity frameworks, including policies, standards, and operational guidelines.
• Stay ahead of emerging cyber threats to suggest pertinent security controls and best practices.

Candidate Requirements

• Possess a degree in Computer Science, Cybersecurity, Information Security, or a closely related field.
• Bring at least five years of solid professional experience in cybersecurity.
• Demonstrated experience in roles involving cybersecurity projects, security governance, risk management, compliance, or operational security.
• Thorough understanding of conducting security assessments, audits, vulnerability management, and remediation procedures.
• Excellent stakeholder management skills with the ability to articulate security concepts to audiences with varied technical backgrounds.
• Strong analytical aptitude, meticulous documentation habits, and adept problem-solving capabilities.
• Self-driven and proactive, capable of working independently while collaborating effectively with technical teams.
• Certifications such as CISM, CISSP, CISA, CRISC, or GIAC are considered valuable assets.