Cyber & Information Security Manager

About the role

We are looking for a self‑motivated Cyber & Information Security Manager to own and evolve our security ecosystem. You will shift the organization from basic IT operations to a mature, framework‑driven cybersecurity posture while acting as the bridge between technical teams, external vendors, and senior leadership.

Key responsibilities

• Lead real‑world incident response and manage live security incidents.
• Monitor TrendMicro and other security tools across servers, email, mobile, and endpoints.
• Investigate and remediate critical vulnerabilities in close partnership with IT teams.
• Collaborate with application owners to coordinate patching and issue resolution.
• Oversee penetration tests and annual assessments, guiding remediation efforts.
• Translate complex cyber risks into clear business language for management and the Board.
• Run quarterly security training, monthly phishing simulations, and provide improvement plans.
• Ensure PDPA compliance through privacy audits and policy updates.
• Leverage NIST CSF or ISO 27001 to prepare for external audits such as the Cyber Trust Mark Certification.
• Evaluate third‑party vendor security and enforce contractual controls.

Required profile

• 5+ years of experience in cybersecurity, including incident response and vendor management.
• Proven ability to explain technical risk to non‑technical executives.
• Professional maturity to enforce security policies across engineering teams.
• Hands‑on experience with security tools and the strategic capability to build policies from scratch.
• Relevant certifications such as CISSP, CISM, or CRISC are highly preferred.

Required skills

• TrendMicro
• Endpoint Detection & Response (EDR)
• Vulnerability Scanners
• Email Security solutions
• Penetration testing
• NIST Cybersecurity Framework (CSF)
• ISO 27001
• Phishing simulation tools

What we offer

• Permanent contract with a salary range of $7,000 – $8,000 per month.
• Additional company perks and the opportunity to lead enterprise‑wide security initiatives.