Information Security Manager

Responsibilities

• Develop and implement the organization’s Information Security Strategy, Framework, and Roadmap.
• Ensure compliance with Central Bank of Jordan (CBJ) cybersecurity and information security requirements.
• Lead cybersecurity risk assessments, maintain risk registers, and oversee mitigation plans.
• Establish and maintain security policies, standards, procedures, and controls.
• Oversee Security Operations Center (SOC) activities, including monitoring, incident detection, response, and reporting.
• Manage internal and external Penetration Testing (PT) and Vulnerability Assessments (VA), including remediation tracking.
• Drive implementation and continuous improvement of:

  • ISO 27001 Information Security Management System (ISMS)

  • ISO 27701 Privacy Information Management System (PIMS)

  • ISO 22301 Business Continuity Management System (BCMS)

• Align cybersecurity practices with the NIST Cybersecurity Framework (CSF) and CIS Critical Security Controls.
• Oversee Business Continuity and Disaster Recovery (BCP/DRP) planning, testing, and maintenance.
• Manage third-party security risks and ensure vendors comply with information security, privacy, and regulatory requirements.
• Review and validate contracts and Service Level Agreements (SLAs) to ensure alignment with cybersecurity standards.
• Provide regular cybersecurity and risk reporting to senior management and relevant committees.

Qualifications

• Bachelor’s degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 8 years of experience in Information Technology, with at least 4 years in Information Security or Cybersecurity roles.
• Professional certification is mandatory, such as:

  • Certified Information Security Manager (CISM)

  • ISO 27001 Lead Implementer

• Strong knowledge of cybersecurity governance, risk management, and regulatory compliance frameworks.
• Hands-on experience implementing and maintaining ISO 27001, ISO 27701, and ISO 22301 standards.
• Practical understanding of NIST CSF and CIS Controls.
• Experience managing SOC operations, incident response, vulnerability management, and threat monitoring.
• Familiarity with banking systems, data protection laws, and financial-sector cybersecurity regulations.
• Excellent analytical, communication, leadership, and stakeholder management skills.

Required Skills

• Cybersecurity

Job Details

• Location: Amman - Jordan
• Industry: Information & Communication Technologies
• Job Type: Full-Time
• Degree: Bachelor
• Experience: 8+
• Nationality: Unspecified