Manager – Information Security & Compliance

Job Description

The Manager – Information Security & Compliance will be responsible for managing and strengthening the organization’s information security and compliance framework. The role involves implementing security policies, maintaining compliance with relevant standards, identifying and mitigating information security risks, and ensuring effective security governance across the organization. The ideal candidate should have strong knowledge of information security, risk management, compliance frameworks, and industry standards such as ISO 27001 and PCI DSS.

Qualifications & Requirements

• Bachelor’s Degree in Computer Science, Information Security, Management Information Systems, or a related field.
• Professional certifications such as CISA, CISM, CRISC, or CISSP will be an added advantage.
• Previous experience in developing, implementing, and maintaining ISO 27001 and PCI DSS frameworks is preferred.
• Strong understanding of information security, risk management, compliance, and security governance.
• Excellent analytical, problem-solving, communication, and leadership skills.
• Ability to manage security and compliance initiatives across multiple teams.

Responsibilities

• Develop, implement, and maintain the organization’s Information Security Management System (ISMS).
• Ensure compliance with ISO 27001, PCI DSS, and other applicable information security standards and regulations.
• Identify, assess, and manage information security risks and recommend appropriate mitigation measures.
• Develop and maintain information security policies, procedures, standards, and controls.
• Conduct and coordinate security assessments, internal audits, compliance reviews, and risk assessments.
• Monitor compliance with established security policies and regulatory requirements.
• Coordinate with internal teams, auditors, and external stakeholders on security and compliance matters.
• Promote information security awareness and best practices across the organization.
• Track and report security risks, compliance gaps, audit findings, and corrective actions to management.
• Support continuous improvement of the organization’s information security and compliance framework.