Manager Information Security

Role purpose: Lead and continuously improve the organization’s information security program to protect data, systems, and services, ensuring risk-based decision-making and compliance with applicable standards and regulations., * Define and execute the information security strategy, roadmap, and governance model.

• Own security policies, standards, and procedures; drive adoption across teams.
• Conduct and oversee risk assessments, threat modeling, and control effectiveness reviews.
• Manage security incident response processes, including preparedness, detection, triage, and post-incident improvements.
• Partner with IT, engineering, and business stakeholders to embed security in projects and operations.
• Oversee third-party/vendor security due diligence and ongoing monitoring.
• Support audits and compliance efforts; maintain evidence and reporting for internal and external stakeholders.
• Build security awareness initiatives and contribute to a strong security culture.

• Proven experience leading information security programs, teams, or major initiatives.
• Strong knowledge of security frameworks and controls (e.g., ISO 27001, NIST, CIS).
• Hands-on understanding of cloud, network, identity, endpoint, and application security concepts.
• Experience with incident response, vulnerability management, and security monitoring.
• Ability to translate technical risks into business impact and executive-ready reporting.
• Excellent stakeholder management, communication, and project leadership skills.