Cybersecurity Manager

About the role

The Cybersecurity Manager will lead the organization’s information security program, ensuring alignment with business strategy, regulatory requirements, and industry best practices. Reporting to the CIO, you will shape governance, risk, and compliance initiatives while fostering a strong security culture across all departments.

Key responsibilities

• Develop, maintain, and enforce security policies, standards, procedures, and guidelines.
• Establish and operate an enterprise risk management framework, maintaining the risk register and reporting residual risk to senior leadership.
• Lead security awareness and training programs to embed a security‑first mindset.
• Coordinate internal and external audits, manage findings, and act as the primary liaison for audit engagements.
• Oversee third‑party and vendor risk management, including due diligence and contractual security requirements.
• Own the ISO 27001 ISMS, driving certification, surveillance, and continual improvement cycles.
• Ensure compliance with Financial Regulatory Authority (FRA) cybersecurity and IT governance mandates, preparing required reports and attestations.
• Manage vulnerability management and penetration testing programs, driving remediation and reporting trends.

Required profile

• Proven experience in information security governance, risk management, and regulatory compliance.
• Strong understanding of ISO 27001, NIST CSF, CIS Controls, and PCI DSS frameworks.
• Experience leading audit processes and third‑party risk assessments.
• Ability to communicate security concepts to executive audiences and drive cultural change.

Required skills

• ISO 27001, ISO 27002, ISO 27005, ISO 27017, ISO 27018
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• PCI DSS
• Vulnerability management and scanning
• Penetration testing coordination
• Risk assessment and risk register maintenance
• ISMS implementation and audit
• Regulatory compliance (FRA) and reporting