- Location
- George Town, George Town
- Type
- Full-time
- Department
- Security
- Seniority
- Manager
- Source
- RecruiterFlow
Description
We are seeking an experienced Senior Manager, Information Security to lead our client’s enterprise-wide cyber security programme. Working closely with executive leadership and IT teams, the successful candidate will develop and implement cyber security strategies, strengthen risk management and regulatory compliance, and enhance the organisation’s overall security posture and resilience.
The role will have responsibility for cyber security governance, policies and standards, enterprise risk management, third-party security assurance, penetration testing, incident response and recovery. The successful candidate will also oversee the cyber security budget and external service providers, ensure compliance with applicable data protection and privacy legislation, and embed security and resilience into business continuity and disaster recovery planning.
Requirements:
- Bachelor’s degree in computer science, information security or a related discipline. A postgraduate degree is preferred.
- A CISSP certification is essential; preferably CISM, CRISC, CCSP or CISA.
- A minimum of 12 years’ information security experience, including at least five years leading an enterprise-scale cyber security function.
- Strong technical knowledge of security frameworks such as NIST CSF and ISO 27001, network security, cloud and on-premises environments, and incident management is essential, together with proven leadership and stakeholder management capabilities.
#LI-ML1
Skills
Penetration TestingRisk ManagementComplianceISO 27001CISSP