Information Security Manager

About the role

We are looking for a senior Information Security Manager to lead the company‑wide security program. The role oversees technical security across IT and OT environments, ensuring compliance with regulations and industry best practices. You will drive continuous improvement and act as the primary point of contact for security incidents.

Key responsibilities

• Review and align information security policies, procedures and standards with market and group requirements.
• Provide leadership and consulting to inter‑departmental stakeholders to ensure compliance of critical systems with government ordinances and industry regulations.
• Oversee continuous monitoring of IT and OT systems for breaches, unauthorized access, vulnerability patching and malicious activity.
• Identify security vulnerabilities, assess risks and advise system owners on mitigation measures.
• Lead incident response teams, analyse root causes and coordinate remedial actions.
• Conduct deep‑dive audits of daily operations, review system logs and validate critical configuration changes.

Required profile

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering or related field.
• 5+ years of progressive experience in enterprise information and cybersecurity, covering applications and infrastructure.
• Professional security certifications such as CISSP and CISM (mandatory); CCNP or MCSE preferred.
• Proven ability to work under pressure, manage multiple tasks and adopt new technologies.

Required skills

• Security monitoring tools: SIEM (e.g., Sentinel), SOC.
• Vulnerability management tools: Nessus, Microsoft Defender, Qualys.
• Network and endpoint security: firewalls, Zscaler, EDR, IDS/IPS, antivirus.
• Identity and access management: PAM solutions.
• Cloud security platforms: Microsoft Azure and Amazon AWS.
• Experience with operating system, network and application vulnerability assessments.
• Knowledge of intrusion detection methodologies and tools.
• Familiarity with ITIL v3 and ISO 27001 frameworks.