IT Security Manager

About the role

An experienced Security Manager is sought to lead cybersecurity governance, risk, compliance and operational security for large-scale public sector projects. The role works closely with government stakeholders, auditors, vendors and technology teams to keep systems and infrastructure secure and compliant throughout their lifecycle.

Key responsibilities

• Lead cybersecurity governance, risk management, compliance and security assurance activities.
• Establish and maintain security policies, standards, procedures and governance frameworks.
• Manage security accreditation, including VA/PT, security assessments, remediation and closure.
• Oversee vulnerability management, patch governance, security monitoring and incident response.
• Ensure security controls and Secure-by-Design / Security-by-Default principles are applied across applications and infrastructure.
• Act as the primary cybersecurity contact for government agencies, auditors, vendors and project stakeholders.
• Identify security risks and drive mitigation and continuous improvement.
• Lead and mentor cybersecurity personnel and promote security awareness across project teams.
• Provide management with updates on security posture, risk, compliance and remediation.

Required profile

• Degree in Cybersecurity, Information Security, Computer Science or a related discipline.
• 8+ years of cybersecurity experience, including 3-5 years in a leadership role.
• Strong experience in cybersecurity governance, risk, compliance, security operations and assurance.
• Experience managing vulnerability assessments, penetration testing, remediation and security audits.
• Good understanding of security controls across applications, infrastructure and enterprise environments.
• Experience in government or other highly regulated environments is advantageous.
• Knowledge of ISO/IEC 27001, ISO 9001 and ISO/IEC 12207 is beneficial.
• Certifications such as CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor are highly desirable.