Information Security Manager

You will be a hands-on Information Security Manager with a deep technical background to lead the protection of our clients' infrastructure, products, and customer data. You will have a specific emphasis on infrastructure security, encryption, and incident response.

Client Details

A payments solutions company in the Middle East.

Description

1. Develop and manage a comprehensive security program focused on securing infrastructure, products, and customer data.
2. Oversee the development and enforcement of security policies, incident management processes, and risk mitigation strategies.
3. Collaborate with development teams to integrate security into each phase of the software development lifecycle. Ensure code reviews, secure coding practices, and vulnerability scanning are executed.
4. Ensure robust security measures are implemented to protect IT infrastructure, including data centers, customer-hosted systems, and internal environments.
5. Lead regular penetration testing, vulnerability assessments, and remediation efforts across all systems, collaborating with development and IT teams to ensure security posture.
6. Implement and manage encryption technologies and data protection patterns to safeguard sensitive information and ensure compliance with regulatory requirements.
7. Lead incident detection, response, containment, and forensic investigations. Proven ability to handle high-severity incidents and mitigate potential risks.
8. Conduct IT risk assessments, manage vendor risk, and implement security controls to mitigate vulnerabilities.

Profile

1. 10+ years of experience in Information Security.
2. Strong technical background, with deep expertise in security architecture, penetration testing, and infrastructure security.
3. Extensive experience in the secure software development lifecycle (SDLC), including secure coding, vulnerability management, and code reviews.
4. Expertise in incident response, digital forensics, and malware containment.
5. Familiar with encryption, data protection patterns, and regulatory compliance.
6. Experience securing cloud environments (AWS/Azure) and financial systems like SWIFT.
7. Certifications such as CISM, CISSP, ISO 27001 LI/LA are preferred.

Job Offer

This is a unique opportunity to join a leading organization and play a key role at a growth stage.

Skills

SSDLC, Cloud