Manager, IMS

1. Security Strategy Development and Implementation:
   
• Develop and implement the company's cybersecurity
  strategy to protect information systems and assets.
  
• Collaborate with business units to align security
  strategies with organizational goals.
  
• Drive risk assessments, threat modeling, and
  vulnerability assessments.
  
2. Policy and Compliance Management:
   
• Establish and maintain security policies, standards,
  and guidelines.
  
• Ensure compliance with regulatory requirements such
  as GDPR, HIPAA, and ISO/IEC 27001.
  
• Oversee the implementation of data protection and
  information governance best practices.
  
3. Incident Management and Response:
   
• Lead incident response planning and execution,
  ensuring timely mitigation of security breaches.
  
• Investigate and report security incidents, ensuring
  continuous improvement in response protocols.
  
• Conduct post-incident reviews and coordinate
  remediation activities.
  
4. Team Leadership and Development:
   
• Lead a team of security professionals, providing
  direction, mentorship, and performance evaluations.
  
• Foster a security-conscious culture within the
  organization, providing ongoing training and awareness programs.
  
• Collaborate with cross-functional teams, including
  IT, legal, and operations.
  
5. Vendor and Solution Management:
   
• Evaluate, select, and manage security vendors and
  third-party service providers.
  
• Oversee security technology deployments, including
  firewalls, encryption systems, IDS/IPS, and endpoint protection.
  
• Monitor and review security solutions for
  effectiveness and continuous improvement.
  
6. Continuous Monitoring and Threat Intelligence:
   
• Implement and manage security monitoring systems,
  ensuring continuous oversight of network traffic and system behavior.
  
• Stay up-to-date on emerging cybersecurity threats and
  trends, adjusting strategies as necessary.
  
• Conduct regular security audits and penetration tests
  to validate system security.
  
7. Stakeholder Communication:
   
• Communicate security risks and incident updates to
  executive management and relevant stakeholders.
  
• Prepare security reports, including analysis of
  incidents and mitigation strategies.
  
• Advocate for the importance of security within
  business operations and strategy.
  

QUALIFICATIONS REQUIRED:

• Bachelor’s Degree in Computer Science, Information
  Technology, Cybersecurity, or related field. A Master’s Degree is
  an added advantage.
  
• 10+ years of experience in IT security roles, with at
  least 5 years in a managerial or leadership position.
  
• Proven experience in developing and implementing security policies
  and strategies in a business environment
  
• Demonstrated track record of managing complex
  security projects and initiatives.