The posting
Information Security Manager
Minimum Requirements:
- A bachelors degree in Computer Science or Information Technology.
- Completed Cyber Security or an equivalent qualification.
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) (Negotiable).
- 3-5 years of experience in information / Cyber Security, and IT Security background.
- Strong knowledge of information security principles and practices.
- Understanding network protocols, firewalls, intrusion prevention, and intrusion detection systems.
- Proficiency with various operating systems, such as Windows, Linux, etc.
- Ability to identify and assess vulnerabilities in systems, networks, and social engineering.
- Proficient understanding of scripting and programming languages, including but not limited to Python, Perl, Bash, Java, PHP, etc.
Responsibilities:
- Creating and enforcing security policies, procedures, and protocols to protect the company's data and information assets.
- Identifying, mitigating security risks, and ensuring compliance with relevant regulations and standards.
- Addressing security incidents and working in collaboration with various departments, promoting a culture of security awareness and the implementation of best security practices within The Company.
- Providing leadership and effective communication to guide and motivate a team of Cyber Security specialists.
- Defining Cyber-Security objectives supported by a roadmap to ensure the companys information assets and data are effectively protected.
- Defining metrics on measuring and improving the maturity level of The Companys Cyber Security posture.
- Defining and enhancing management and operational reporting of the Cyber Security posture.
- Creating and maintaining information security policies and procedures to mitigate risks and ensure compliance with industry standards and regulations.
- Monitoring and ensuring compliance with applicable regulations and standards, such as NIST and ISO 27001.
- Conducting risk assessments to identify potential vulnerabilities and threats and developing strategies to mitigate those risks.
- Managing security systems for potential breaches and crisis management by responding to security incidents effectively.
- Conducting training and education programs to raise security awareness among employees and foster a culture of security within the organization.
- Staying updated with the latest Cyber trends and threats.
- Managing hybrid security environments integration between on-premises and cloud platforms.
- Working with various stakeholders across The Company to ensure a cohesive approach to Cyber Security.
- Collaboration and partnering with security vendors.



