Manager, IT Security

Manager, IT Security – Drive Enterprise Security Strategy and Operational Excellence

In this pivotal leadership role, the Manager, IT Security will spearhead the organization’s comprehensive IT security program, ensuring robust protection of critical systems, data, and business operations. This strategic and hands-on position demands a visionary leader who can align security initiatives with business objectives while fostering a culture of proactive risk management and compliance. Reporting directly to senior IT leadership, this role will oversee a high-performing team of security specialists, implement cutting-edge security technologies, and collaborate across departments to embed security as a core principle in every technological and operational initiative.

As the architect of the organization’s security posture, the Manager will develop and refine a forward-thinking IT security strategy that adheres to globally recognized frameworks such as ISO 27001, NIST, and industry-specific regulations. This includes designing and maintaining a resilient security architecture that safeguards against evolving cyber threats while ensuring seamless alignment with business goals. With a focus on both strategic vision and tactical execution, the ideal candidate will lead the implementation of advanced security solutions—including SIEM, IDS/IPS, endpoint protection, vulnerability management, and Privileged Access Management (PAM)—to fortify the organization’s defenses.

Key Responsibilities

This role encompasses a broad spectrum of responsibilities, ensuring end-to-end security governance and operational excellence:

• Strategic Leadership: Develop and oversee the enterprise IT security strategy, roadmap, and reference architecture, ensuring alignment with industry best practices and regulatory requirements. Drive continuous improvement in security frameworks to mitigate risks and enhance resilience.
• Team Management: Lead, mentor, and grow a high-performing team of IT Security Specialists and Senior Specialists, fostering a culture of innovation, accountability, and professional development. Implement robust performance management processes, succession planning, and career growth initiatives to retain top talent.
• Incident Response and Forensics: Serve as the primary leader for the organization’s security incident response program, managing major breaches, forensic investigations, and root cause analyses. Conduct thorough post-incident reviews to enhance response capabilities and prevent future occurrences.
• Risk and Compliance Management: Conduct enterprise-wide risk assessments, vulnerability management programs, and penetration testing exercises. Prioritize and track remediation efforts while ensuring compliance with critical frameworks such as ISO 27001, NIST, GDPR, SOC 2, and SOX. Act as the primary liaison for internal and external security audits, ensuring seamless adherence to regulatory and contractual obligations.
• Disaster Recovery and Business Continuity: Establish, maintain, and regularly test disaster recovery (DR) and business continuity plans (BCP) for security-critical systems, ensuring minimal downtime and data loss during disruptions.
• Policy and Awareness: Develop, approve, and enforce comprehensive information security policies, standards, and guidelines across the organization. Lead security awareness and training programs to cultivate a security-conscious workforce, reducing human error and enhancing overall resilience.
• Technical Implementation: Direct the administration of enterprise security technologies, including firewalls, email security gateways, and advanced threat detection systems. Collaborate with IT, OT, and cybersecurity teams to integrate security-by-design principles into infrastructure, applications, cloud environments, and service management processes.
• Vendor and Budget Management: Oversee the IT Security budget, vendor relationships, and procurement processes, ensuring cost-effective deployment of security tools and services. Negotiate contracts and partnerships to leverage the latest security innovations while maintaining fiscal responsibility.
• Executive Reporting: Provide regular, data-driven insights to IT leadership and executive management through detailed security posture reports, risk exposure dashboards, and KPI tracking. Translate complex security metrics into actionable strategies to inform business decisions.

This role is ideal for a seasoned security professional who thrives at the intersection of strategy and execution, with a passion for driving organizational resilience in an increasingly complex threat landscape.