Information Security Manager

Responsibilities:

• Lead, mentor, and coach a team of security engineers, setting a high bar for technical excellence, ownership, and delivery.
• Design and Build Security Systems: Own the architecture and implementation of scalable, resilient security platforms and services. Ensure solutions are designed for integration, automation, and long-term maintainability.
• Hands-on Technical Leadership: Provide technical direction through system design, code reviews, and architectural decision-making. Actively contribute to design and development where needed.
• Engineering-First Approach to Security: Drive the shift from manual, process-driven security controls to automated, system-enforced controls embedded in engineering workflows.
• Build vs. Buy Decisions: Evaluate third-party technologies and platforms. Make informed decisions on when to build internally vs. leverage vendors, considering cost, scalability, risk, and integration complexity.
• Platform Integration Ownership: Ensure security capabilities are integrated across enterprise systems (e. g., identity platforms, cloud environments, developer tooling, SIEM/SOAR, and data platforms).
• Program Execution: Deliver on key security engineering initiatives such as zero trust, identity lifecycle automation, cloud security posture, AI security enablement, and vulnerability management platforms.
• Partner Across Stakeholders: Work closely with engineering, IT, cloud, GRC, and product teams to design solutions that align with business needs while improving security posture.
• Support Compliance Through Engineering: Partner with GRC and compliance teams to implement technical controls that satisfy frameworks such as NIST, ISO 27001 and SOC 2 through scalable systems rather than manual processes.
• Operational Excellence: Ensure systems are observable, reliable, and supported with strong operational practices (monitoring, alerting, incident response integration).

Requirements:

• Strong software engineering background (e. g., Python, Go, Java, or similar) with experience building production systems.
• Deep expertise in system design and architecture, including distributed systems and API-driven integrations.
• Experience designing and operating security platforms (IAM, cloud security, endpoint, vulnerability management, etc. ).
• Ability to evaluate and integrate third-party security solutions into enterprise ecosystems.
• Strong understanding of modern security principles (zero trust, identity-first security, defence-in-depth).
• Experience with cloud platforms (AWS, Azure, GCP) and cloud-native architectures.
• Excellent communication skills, with the ability to translate complex technical decisions into business impact.
• Bachelor's degree in computer science, engineering, or a related technical field, or equivalent practical experience.
• Demonstrated experience designing, building, and operating production systems at scale.
• Prior experience in security engineering or closely related engineering disciplines.
• Proven experience leading engineering teams and delivering complex technical initiatives.
• Strong experience with coding, system integration, and automation.
• Experience evaluating and implementing enterprise security technologies.