Information Security and Risk Manager

About the role

The Information Security & Risk Manager will lead the organisation's cyber security programme, shaping strategy, governance and day‑to‑day operations. Reporting to the CTO, you will ensure compliance with regulatory requirements, protect critical data, and foster a security‑aware culture across the company.

Key responsibilities

• Define and execute the Information Security strategy and cybersecurity roadmap.
• Develop, implement and maintain the Information Security Management System (ISMS) and related policies, standards and procedures.
• Maintain the enterprise risk register, conduct risk assessments and produce treatment plans.
• Oversee compliance reporting, including ISO 27001 and relevant regulatory frameworks.
• Manage vulnerability assessment and penetration testing (VAPT) programmes and remediate findings.
• Lead incident response activities, produce cyber‑incident reports and root‑cause analyses.
• Provide security monitoring, threat dashboards and KPI/KRI reporting.
• Design and enforce Identity and Access Management (IAM) models, access matrices and data classification schemes.
• Coordinate internal and external audit evidence, track remediation and support business continuity and disaster recovery planning.
• Drive security awareness training and cultural initiatives.

Required profile

• Minimum 8 years of progressive experience in information security, risk management or related fields.
• Proven track record of leading security programmes and delivering compliance outcomes.
• Strong understanding of ISO 27001, regulatory requirements and best‑practice frameworks.
• Excellent analytical, communication and stakeholder‑management skills.

Required skills

• Security Operations
• Data Protection
• Incident Response
• Vulnerability Assessment & Penetration Testing (VAPT)
• Identity and Access Management (IAM)
• Security Monitoring and Threat Intelligence
• ISO 27001 implementation
• Risk Assessment and Treatment
• Business Continuity & Disaster Recovery planning