Manager: Information Security

We're on the hunt for a seasoned security leader to take the reins of our manager: Information Security role — someone who thrives at the intersection of strategy and hands-on endpoint security leadership, and who's ready to shape how Derivco defends its global technology landscape.

This is a high-impact leadership role where you'll direct endpoint detection and response capabilities, drive security governance, and lead a talented team of security professionals across a global, multi-country footprint. If you're energised by staying ahead of emerging threats, building automation-driven security operations, and mentoring the next generation of security talent, this is the role for you.

What You'll Do

• Lead endpoint detection and response capabilities, tuning detection rules and managing exclusions to ensure rapid identification and containment of security threats


• Manage security platform infrastructure and availability, including patch management, database security, and endpoint protection platforms


• Establish and enforce security governance, policies, and compliance standards aligned with ISO 27001, PCI-DSS, and regulatory requirements


• Drive security infrastructure modernization and DevSecOps initiatives, including automation, infrastructure-as-code, custom dashboards, and CI/CD integrations


• Mentor and develop information security team members and technical specialists, building capability and consistent security standards


• Conduct vulnerability assessments and security scanning activities, coordinating remediation efforts to reduce organisational risk


• Manage strategic relationships with security vendors and compliance partners, coordinating audits, renewals, and product evaluations


• Monitor endpoint security performance metrics and compliance status, reporting findings to senior leadership


• Collaborate with cross-functional teams — Network Security, System Services, Database Support, and Compliance — to deliver cohesive, organisation-wide security


• Provide platform expertise and escalation support to the Security Operations Centre, investigating complex security events and guiding forensic analysis

What We're Looking For

• 8–10 years of progressive experience in information security, endpoint security, or security infrastructure management, with demonstrated team leadership


• A Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, Information Systems, or an equivalent professional qualification


• Expert knowledge of endpoint detection and response platforms, SIEM systems, and database security tools


• Advanced proficiency with security governance frameworks, including ISO 27001, PCI-DSS, and regulatory compliance


• Strategic expertise in DevSecOps methodologies — infrastructure-as-code, custom dashboards, CI/CD pipelines, and containerisation


• Advanced experience managing vendor relationships and security platform lifecycles, including renewals and licensing negotiations


• Proven capability leading and mentoring security teams on endpoint platforms, threat detection, and incident response


• A confident communicator who can engage senior leadership, technical teams, and external stakeholders with equal ease


• A strategic, deep-and-broad thinker who can balance operational excellence with long-term security vision

Why Join Us?

• Lead security for a global, multi-country technology landscape with real scope for impact


• Shape the future of endpoint security through automation, DevSecOps, and modern security tooling


• Build and mentor a high-performing information security team


• Work at the centre of a business that takes security posture and regulatory readiness seriously


• Be part of a culture that champions innovation, accountability, and continuous improvement

If you're a security leader who's ready to modernise, mentor, and make a measurable impact on organisational security posture, we want to hear from you.

Closing Date: 28 August 2026