Security Manager

Client is seeking an experienced Information Security Manager to lead and manage the organization's information security programs, cybersecurity operations, risk management, and compliance initiatives. The ideal candidate will have strong expertise in security policies, risk assessments, vulnerability management, incident response, and regulatory compliance.

The candidate will work closely with IT, engineering, infrastructure, and business teams to protect organizational data, maintain a secure IT environment, and ensure compliance with applicable security standards and regulations.

Key Responsibilities:

• Develop, implement, and maintain information security policies, standards, procedures, and guidelines.
• Lead the organization's information security and cybersecurity programs.
• Identify, assess, and mitigate security risks across applications, infrastructure, networks, and cloud environments.
• Manage security audits, vulnerability assessments, penetration testing, and remediation activities.
• Ensure compliance with security frameworks and standards such as ISO 27001, NIST, SOC 2, and applicable regulatory requirements.
• Lead security incident response, investigation, root-cause analysis, and corrective actions.
• Oversee identity and access management (IAM), privileged access management (PAM), and access control policies.
• Collaborate with IT and engineering teams to implement security best practices across systems and applications.
• Monitor security threats and coordinate with security operations teams to strengthen threat detection and prevention.
• Manage third-party and vendor security risk assessments.
• Develop business continuity, disaster recovery, and data protection strategies in collaboration with relevant teams.
• Conduct security awareness training and promote a security-conscious culture across the organization.
• Prepare security reports, risk assessments, and compliance updates for senior management.
• Lead and mentor information security professionals and coordinate with internal and external stakeholders.

Required Qualifications and Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8–12+ years of experience in information security, cybersecurity, IT risk management, or related areas.
• Previous experience managing information security programs or leading security teams.
• Strong understanding of security frameworks, policies, risk management, and compliance requirements.
• Hands-on experience with vulnerability management, security audits, incident response, and threat mitigation.
• Knowledge of network security, endpoint security, firewalls, encryption, and data loss prevention (DLP).
• Experience with identity and access management (IAM) and privileged access management (PAM).
• Familiarity with cloud security across AWS, Microsoft Azure, or Google Cloud.
• Experience managing security assessments, penetration testing, and remediation efforts.
• Strong communication, leadership, analytical, and problem-solving skills.