Information Security Manager job description

About the job

We are looking for an information security manager to set the organization's information security strategy and policies and manage risk, the team and incident response, protecting data and meeting regulators' requirements.

Duties and responsibilities

• Set the information security strategy, policies and procedures and oversee their implementation
• Assess information security risks and prepare treatment plans for management
• Lead the security team or security operations centre and assign responsibilities
• Own the incident response plan and communications during incidents
• Ensure compliance with standards and regulatory requirements such as ISO 27001 and, in banks, the Central Bank of Libya's instructions
• Arrange security audits and penetration tests and follow up their findings
• Manage the security budget and choose solutions and suppliers
• Build a security culture through staff awareness programmes

Working conditions

• Availability outside working hours during major security incidents

Requirements

• Bachelor's degree in information security, computer science or computer engineering
• At least 6 years of experience in information security management, including at least 2 years leading a team

The years of experience follow the level you choose when posting.

Skills

• Information security governance
• Risk management
• ISO 27001
• Incident response
• Business continuity
• Security policy writing
• Leadership

Preferred

• A professional certificate such as CISSP or CISM
• Experience implementing or auditing ISO 27001
• Experience in banking or telecoms