Information Security Manager

Are you passionate about safeguarding countries, societies, and businesses from hybrid threats?

Look no further! Our rapidly scaling company is committed to this crucial mission, collaborating with some of the world’s most influential organizations, including NATO and the EU.

If you’re ready to join a high-impact team shaping the future of intelligence and security, we invite you to become part of our journey. Join us and help defend the digital world with purpose and innovation!

Role Overview
As our Information Security Manager, you’ll take ownership of information security at Osavul and report directly to the CEO.
You’ll assess and strengthen our security posture, define the strategy and roadmap, and drive its implementation. You’ll be both the strategist and the operator: shaping policies, configuring and running security tools, and building a strong security culture across the team.
This role suits a hands-on security professional with leadership experience who wants to own and shape a security function as the company grows.

Key Responsibilities
Audit our current security posture and define the security strategy and roadmap.
Own Osavul’s information security end-to-end, and make the key decisions on what we implement and when.
Lead our security certification work (ISO 27001, SOC 2, etc.)
Roll out company-wide security practices such as MFA, access control and a password manager, and make sure the team actually uses them.
Set up and manage company devices (MDM), including firewall, application restrictions, and automatic updates.
Set up and run security tooling such as SIEM, and lead incident detection, response, and analysis.
Write, maintain, and enforce security policies and procedures.
Run risk assessments and vulnerability management across our infrastructure, product, and remote team.
Detect and stop threats early, from phishing and social engineering to more complex attempts such as corporate espionage.
Run security awareness training for the team.
Work closely with engineering and infrastructure to build security into how we develop and run our product.

Requirements
5+ years of hands-on experience in information security, security operations, security engineering, or system administration with a strong security focus.
Leadership experience, such as leading a security initiative, project, or small team, while still doing the hands-on work yourself.
Experience in incident response and incident analysis.
Hands-on experience with security tooling such as SIEM, EDR, or MDM.
Working knowledge of security frameworks such as ISO 27001, SOC 2, or NIST.
Experience securing cloud infrastructure and distributed remote teams.
Experience running security awareness training.
High level of independence and ownership.
Ability to both define security strategy and implement it yourself.
Upper-Intermediate English or higher.
Nice to Have
Interest in multi-domain security, where cyber, information, and physical security are handled together.
Background in intelligence, military, or law enforcement before moving into cybersecurity.
Understanding of counterintelligence and influence operations.

We Offer
Opportunity to contribute to a mission-driven startup and support prestigious clients, including governments worldwide, enterprise clients, and leading NGOs in tackling global security challenges.
Autonomy and freedom to drive experiments and bring your own ideas to life.
Flexibility of fully remote work.
Flexible, unlimited time-off policy.

*If your skills and experience are a strong fit for this opportunity, a member of our team will reach out to guide you through the next steps.

Given the large number of applications we process, we are unfortunately unable to provide individual updates to every applicant. If you don’t hear back from us, please consider that your application was not selected for this role.

We truly appreciate your time and interest in applying to join our team!