> Markdown version of [/jobs/ext/4092973-sr-manager-information-security](https://www.wearedevelopers.com/jobs/ext/4092973-sr-manager-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Manager, Information Security

- **Company:** Super Micro Computer
- **Location:** 's-Hertogenbosch, Netherlands
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management, Intrusion Detection and Prevention, Anti-Phishing, Software Vulnerability Management, Data Logging, Information Security Management System
- **Published:** October 27, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=322f6246f3beaca2

## About the Role

* 8+ years of information security experience.
 * 3-5+ years of management or leadership experience.
 * Hands-on experience with ISO 27001 implementation, certification, and audits.
 * Experience with ISO 28000/28001, C-TPAT, or supply chain security programs.
 * Experience in incident response, vulnerability management, risk management, and compliance.
 * Experience supporting global manufacturing, logistics, or technology environments preferred.
 * ISO 27001 Lead Implementer.
 * ISO 27001 Lead Auditor.

## Description

The Senior Manager, Information Security Operations is responsible for leading the organization's Information Security Management System (ISMS), security operations, governance, risk management, compliance, incident response, and supply chain security programs. This role provides strategic and operational leadership to ensure the confidentiality, integrity, and availability of corporate information assets while maintaining compliance with ISO/IEC 27001, ISO 28000/28001, NIST, regulatory requirements, and customer security obligations.

The position works closely with executive leadership, IT, Legal, Human Resources, Operations, Manufacturing, Supply Chain, and external auditors to drive continuous improvement of the organization's security posture and resilience. Responsibilities commonly include incident response management, audit preparedness, security engineering oversight, security questionnaires, and compliance activities., Information Security Program Management

 * Lead and manage the Information Security Operations team.
 * Develop and execute the organization's information security strategy and roadmap.
 * Establish security policies, standards, procedures, and guidelines.
 * Monitor and improve overall security maturity and effectiveness.
 * Provide executive reporting and security metrics to senior leadership.

ISO 27001 ISMS Management

 * Maintain and continually improve the Information Security Management System (ISMS).
 * Manage ISO 27001 certification activities, surveillance audits, and recertification audits.
 * Conduct risk assessments and oversee risk treatment plans.
 * Ensure compliance with ISO 27001 controls and applicable regulations.
 * Coordinate internal audits, management reviews, and corrective action programs.

ISO 28000 / ISO 28001 Supply Chain Security

 * Lead implementation and maintenance of supply chain security programs.
 * Support ISO 28000/28001 certification and customer security requirements.
 * Conduct contract manufacturer and supplier security assessments.
 * Oversee supply chain risk management and remediation activities.
 * Collaborate with procurement, logistics, warehousing, and manufacturing teams to improve security controls.

Security Operations

 * Oversee Security Operations Center (SOC) activities and monitoring.
 * Manage security incident response, investigations, and recovery efforts.
 * Coordinate cyber incident handling with internal stakeholders and external partners.
 * Lead threat management, vulnerability management, and remediation programs.
 * Ensure effective security monitoring, logging, and detection capabilities.

Governance, Risk, and Compliance (GRC)

 * Manage enterprise risk assessments and security reviews.
 * Oversee third-party and vendor security risk management.
 * Support customer security assessments and questionnaires.
 * Ensure compliance with applicable regulatory, contractual, and security requirements.
 * Maintain security policies and procedures and promote organizational compliance.

Security Awareness and Training

 * Develop and maintain security awareness programs.
 * Conduct phishing simulations and user training initiatives.
 * Promote a strong security culture throughout the organization.

Business Continuity and Resilience

 * Support business continuity and disaster recovery planning.
 * Participate in continuity testing and crisis management exercises.
 * Ensure security requirements are integrated into continuity planning.

Leadership and Team Development

 * Lead, mentor, and develop security professionals.
 * Manage project prioritization, resource allocation, and budgeting.
 * Foster collaboration across business units and global locations.