Information Security Manager

Overview

Job Description

Key Responsibilities

• Support the Regional CSO and the Senior Information Security Manager in the definition of the Cyber Defense Strategy.
• Define policy, process frameworks, or/and update them periodically.
• Manage the security tools – vulnerability scanner, policy compliance, source code scanner, cloud security monitoring tools.
• Define or/and update the security KPI, KRI dashboard for presenting to various internal and external committees and maintain them in collaboration with IT Operations and Platform Owners within the acceptable thresholds.
• Govern the deliverables of SOC and maintain the KPI in check.
• Guide the Security Analysts in alerts and investigations as needed mentor the team.
• Ensure the SOC monitors all operations and infrastructure from a Security perspective.
• Support the Senior Manager on areas of risk management, especially around 3rd party risk assurance and assessment functions.
• Respect the annual budget defined for his activities and projects.
• Ensure the achievement of the annual IS Targets (KPIs) agreed.
• Lead the implementation of complex

Profile / Requirements

• Positive attitude and problem-solving mindset
• Supporting organizations best interest first
• Strategic thinking
• Expert knowledge on information and data security
• Seasoned on both Offensive and Defensive Security.
• Strong knowledge concerning Information Technology (Applications, Architectures, Networking, Infrastructures, etc.)
• Good "Timekeeper"
• Open minded to international environment
• Management and leadership skills.
• Team player.
• Good interpersonal relationship and communication skills.
• Excellent English written and spoken communication skills.
• Able to work independently under minimum supervision.
• Ability to make a positive impact in the organization.
• At least a bachelor's degree in computer science or cybersecurity streams
• International Information Security Standards (ISO 27001, CIS, NIST, etc.)

Desirable

• CISSP, OSCP, GPEN, GCIH, like well recognized certification(s).
• Not mandatory but an advantage on having any cloud specialization like –

• Microsoft Certified: Azure Security Engineer Associate

• AWS Certified Security – Specialty
• Good knowledge of local laws and regulations with impact in Cybersecurity