Information Systems Security Manager

About the role

The Information Systems Security Manager will lead the design, implementation and continuous improvement of the organisation's security posture. Reporting to senior management, you will ensure that security controls align with business objectives and protect critical assets.

Key responsibilities

• Develop and maintain the Information Security Strategy and Management Framework.
• Create, review and enforce ICT security policies, standards and procedures.
• Lead the enterprise cybersecurity programme, including vulnerability assessments and penetration testing.
• Coordinate security incident response and produce monthly cyber‑threat reports.
• Administer enterprise firewalls, VPNs, IDS/IPS and other security appliances.
• Manage Endpoint Detection & Response (EDR), encryption and antivirus compliance.
• Oversee identity governance, role‑based access control and MFA enforcement.
• Maintain the ICT Risk Register, conduct risk assessments and support audit remediation.
• Support Business Continuity and Disaster Recovery planning, including security testing of backups.

Required profile

• Mid‑level professional with at least 5 years of experience in information security.
• Proven track record of managing security programmes in a manufacturing or similar environment.
• Strong understanding of security governance, risk management and compliance.

Required skills

• Firewall administration and rule management.
• VPN security and remote‑access controls.
• IDS/IPS policy configuration.
• Endpoint Detection & Response (EDR) tools.
• Endpoint encryption and antivirus solutions.
• Multi‑Factor Authentication (MFA) implementation.
• Role‑Based Access Control (RBAC) and identity governance.
• Vulnerability assessment and penetration testing.
• Security incident response and reporting.