Information Technology Security Manager

Role Overview

We seek a seasoned Security Manager to oversee cybersecurity governance, risk, compliance, and operational security for expansive public sector initiatives. This leadership position requires collaboration with government officials, auditors, vendors, and tech teams to uphold robust and compliant security practices throughout system lifecycles.

Key Responsibilities

• Direct efforts in cybersecurity governance, risk management, compliance, and security assurance.
• Develop and sustain security policies, standards, procedures, and governance frameworks.
• Lead security accreditation processes such as vulnerability assessments, penetration testing, remediation, and closure activities.
• Manage vulnerability control, patch management, security monitoring, and response to incidents.
• Ensure that Secure-by-Design and Security-by-Default principles are embedded in applications and infrastructure.
• Serve as the main cybersecurity liaison for government bodies, auditors, vendors, and project stakeholders.
• Detect security threats and champion mitigation strategies and ongoing improvement.
• Guide and coach cybersecurity staff while fostering security awareness within project groups.
• Provide regular updates to management on security posture, risks, compliance status, and remediation efforts.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• At least 8 years of experience in cybersecurity, with 3 to 5 years in a leadership capacity.
• In-depth expertise in cybersecurity governance, risk, compliance, security operations, and assurance.
• Proven experience handling vulnerability assessments, penetration testing, remediation, and conducting security audits.
• Comprehensive knowledge of security controls across applications, infrastructure, and enterprise environments.
• Experience within government or similarly regulated sectors is a plus.
• Familiarity with standards such as ISO/IEC 27001, ISO 9001, and ISO/IEC 12207 is advantageous.
• Excellent stakeholder engagement, leadership acumen, communication, and reporting skills.
• Preferred certifications include CISSP, CISM, CRISC, CCSP, or ISO 27001 Lead Auditor credentials.