Senior Manager

Description:

Generic Role Description:

▸ Develop, maintain and lead comprehensive information security strategy aligned with the organization's business goals and objectives.

▸ To prioritize security initiatives and investments based on risk assessment and potential impact.

▸ Create, implement & enforce information security policies, standards & guidelines across the organization.

▸ Ensure policies are regularly reviewed & updated to address emerging threats and industry best practices.

▸ Lead the identification, assessment, & mitigation of information security risks to protect the organization's assets and data.

▸ Monitor and ensure compliance with relevant industry standards (e.g., ISO 27001, NIST, Regulatory compliances) and

▸ regulatory requirements.

▸ Lead incident response efforts, including investigation, containment, communication, and recovery.

▸ Develop plan to address security breaches, incidents and data breaches.

▸ Assess and manage security risks associated with third-party vendors, suppliers, and partners.

▸ Evaluate and recommend security technologies, tools, and solutions manage disaster recovery and Business continuity processes with technology and business teams.

Desirable Education, Skills Knowledge & Experience:

▸ Master's degree in Information Security, Cyber Security or Information Systems Security or Assurance from HEC recognized University/Institute.

▸ Minimum 8 years of experience is required

▸ Professional certifications such as CISSP & CISM are highly desirable.

▸ Strong knowledge of security frameworks, standards, and regulations.

▸ Excellent leadership and team management skills.

▸ Effective communication and interpersonal abilities.

▸ Familiarity with security technologies such as SIEM, IDS/IPS, firewalls, encryption, etc.