Senior Manager - Information Security

About the role

An employer is seeking an experienced Senior Manager, Information Security to lead its client's enterprise-wide cyber security programme. Working closely with executive leadership and IT teams, the successful candidate will develop and implement cyber security strategies, strengthen risk management and regulatory compliance, and improve the organisation's security posture and resilience.

Key responsibilities

• Cyber security governance, policies and standards
• Enterprise risk management
• Third-party security assurance, penetration testing and incident response and recovery
• Overseeing the cyber security budget and external service providers
• Ensuring compliance with data protection and privacy legislation
• Embedding security and resilience into business continuity and disaster recovery planning

Required profile

• Bachelor's degree in computer science, information security or a related discipline; a postgraduate degree is preferred
• CISSP certification is essential; CISM, CRISC, CCSP or CISA preferred
• At least 12 years' information security experience, including at least five years leading an enterprise-scale cyber security function
• Proven leadership and stakeholder management capabilities

Required skills

• Strong technical knowledge of security frameworks such as NIST CSF and ISO 27001
• Network security, cloud and on-premises environments, and incident management