Information Security Manager - Cyber Security & GRC

About the role

A leading multi-billion dollar company is looking for a leadership-caliber Information Security Manager to strengthen its cybersecurity capabilities and protect its digital infrastructure. The role sits within a well-established multinational with a strong investment in technology, and offers autonomy to make key decisions on security strategy and roadmap.

Key responsibilities

• Define and execute the cybersecurity and technology risk strategy to secure digital platforms, cloud assets and enterprise systems.
• Direct the adoption of security governance and control frameworks across the enterprise while maintaining regulatory compliance.
• Oversee security operations, threat intelligence, vulnerability assessments and incident response readiness across hybrid environments.
• Establish a third-party risk management program to evaluate and monitor external vendors and integration partners.
• Act as the primary advisor to executive leadership on the organisation's security posture and emerging risk landscape.

Required profile

• At least 7 years of experience in cyber security and information security.
• Knowledge of information security frameworks such as ISO 27001 and NIST.
• Exposure to stakeholder and external vendor management.
• A proven track record in a lean security team is highly preferred.
• Bachelor's degree; no additional qualifications required.

Required skills

• Cybersecurity and incident response
• Security Information and Event Management (SIEM)
• Governance, Risk and Compliance (GRC)
• Technology and IT risk management