Information Security Manager

Key Responsibilities:

• Lead and manage ISO 27001 and SOC2 audit processes, including planning, execution, and reporting.
• Develop, implement, and maintain information security policies, procedures, and controls.
• Conduct risk assessments and vulnerability assessments to identify and mitigate security risks.
• Monitor and respond to security incidents and breaches, ensuring timely resolution and documentation.
• Collaborate with internal and external stakeholders to ensure compliance with regulatory requirements and industry best practices.
• Provide training and awareness programs to employees on information security policies and procedures.
• Stay current with emerging security trends, threats, and technologies, and recommend enhancements to the security program.
• Prepare and present regular reports on the status of the information security program to senior management.

Required Skills, Experience, and Qualifications:

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Minimum of 5 years of experience in information security management.
• Proven experience leading ISO 27001 and SOC2 audits and ensuring compliance with standards.
• Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NIST).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to work effectively with diverse teams.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable..

Preferred Skills:

• Experience with cloud security and managing security in cloud environments.
• Familiarity with data privacy regulations (e.g., GDPR, CCPA).
• Experience with security tools and technologies (e.g., SIEM, IDS/IPS, DLP).