Information Security Manager

1. Strategy & Planning: o Develop and implement a strategic, comprehensive enterprise information security and IT risk management program. o Work directly with the executive team to determine acceptable levels of risk for the organization.

2. Security Management: o Implement and maintain policies, procedures, standards, and guidelines that ensure the organization’s information assets are adequately protected. o Work with IT department staff to ensure security measures are implemented effectively and meet compliance requirements.

3. o

Risk Management:

Ensure that the organization’s security policies, standards, and procedures are up-to-date, consistent with industry standards, and communicated effectively. o Identify, communicate, and mitigate security risks and threats to the organization.

4. Compliance & Governance: o Oversee incident response planning, including coordination with senior management, legal, and law enforcement as required. o Work with external auditors, regulatory bodies, and stakeholders to ensure compliance with applicable laws and regulations.

5. Security Operations: o Manage the development and implementation of global security policies, standards, guidelines, and procedures to ensure ongoing maintenance of security. Education & Awareness: o Develop, implement, and oversee information security awareness and training programs for all employees.

6. Team Management: o Manage the security team, including recruitment, training, mentorship, and performance management.