(Senior) Manager Information Security

Role purpose: Lead and continuously improve the organization’s information security program to protect data, systems, and services, ensuring risk-based decision-making and compliance with applicable standards and regulations. Core responsibilities - Define and execute the information security strategy, roadmap, and governance model. - Own security policies, standards, and procedures; drive adoption across teams. - Conduct and oversee risk assessments, threat modeling, and control effectiveness reviews. - Manage security incident response processes, including preparedness, detection, triage, and post-incident improvements. - Partner with IT, engineering, and business stakeholders to embed security in projects and operations. - Oversee third-party/vendor security due diligence and ongoing monitoring. - Support audits and compliance efforts; maintain evidence and reporting for internal and external stakeholders. - Build security awareness initiatives and contribute to a strong

security culture. Required skills and qualifications - Proven experience leading information security programs, teams, or major initiatives. - Strong knowledge of security frameworks and controls (e.g., ISO 27001, NIST, CIS). - Hands-on understanding of cloud, network, identity, endpoint, and application security concepts. - Experience with incident response, vulnerability management, and security monitoring. - Ability to translate technical risks into business …