Information Security Manager

Responsibilities: Protects both internal service delivery assets and client facing managed services Compliance & Auditing: Ensure strict alignment with industry-standard frameworks (e.g., ISO 27001, PCI-DSS). Lead governance adherence, internal audits, and external client compliance assessments Stakeholder & Client Management: Serve as the primary point of contact for client security inquiries, presenting security metrics, risks, and proposed mitigation controls Direct engagement with customer to provide technical expertise and guidance regarding the optimization of the managed security environment Policies and Governance: Work closely with stakeholders, review security policies of the existing environment Direct the development, implementation, and enforcement of InfoSec policies, cybersecurity roadmaps, and incident response plans Develop, implement, and maintain the firm's sustainable information security framework, policies, and risk management plans Operational and Implementation: Establishes, implements, and upgrades an organization’s cybersecurity measures to protect networks and systems from potential attacks Coordinate rapid triage, response, and post-mortems for any security breaches or service disruptions Execute existing configurations, security policies and identify areas of improvement Provide analysis report on existing current and areas of improvement Create Security Awareness: Collect existing materials of security awareness. Prepare for the security awareness training Vendor Management: Manage third-party technology vendor licensing, relationships, and budget planning Key Requirements & Qualifications: Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) are highly preferred Experience: 5+ years of combined experience in IT security, risk management, and physical security management, preferably within a Managed Service Provider (MSP/MSSP) setting Technical Acumen: Strong knowledge of security architecture, including SIEM, SOAR, EDR/XDR, firewalls, and vulnerability management Soft Skills: Exceptional stakeholder management, crisis leadership, and problem-solving abilities to navigate complex, fast-paced environments