Security Project Manager

Security Project Manager

We are seeking a highly motivated and experienced Information Security Manager to join our team and play a pivotal role in safeguarding our organization's critical data and systems. In this role, you will be responsible for developing, implementing, and maintaining a comprehensive information security program. You will also lead and manage a team of security professionals (depending on the organization size) and ensure our organization adheres to industry best practices and regulatory compliance standards.

Responsibilities:

• Develop, implement, and manage a comprehensive information security program aligned with business needs and industry best practices.
• Manage security tools implementation projects, ensuring successful integration and operation within the IT environment (8-10 years of experience required).
• Conduct risk assessments to identify, analyze, and mitigate security vulnerabilities within the organization.
• Develop and maintain security policies, procedures, and standards to ensure data confidentiality, integrity, and availability.
• Oversee compliance with relevant security regulations and industry standards (e.g., PCI-DSS, HIPAA, GDPR).
• Manage firewall policies and analyze firewall logs to identify and address potential security threats.
• Lead and participate in security awareness training programs to educate employees on best security practices.
• Manage and chair security committee meetings (CAB meetings) to discuss security posture, risks, and mitigation strategies.
• Conduct regular security audits and penetration testing to identify and address vulnerabilities.
• Develop and maintain incident response plans to effectively respond to security incidents.
• Stay up to date with the latest security threats, trends, and technologies.
• Manage security budget and ensure efficient allocation of resources.

Qualifications:

• Bachelor's degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 8-10 years of experience managing security tools implementation projects.
• Proven experience in developing, implementing, and maintaining a comprehensive information security program.
• Strong understanding of security best practices, frameworks, and methodologies (e.g., NIST CSF, ISO 27001).
• Experience with conducting risk assessments and managing security vulnerabilities.
• Experience in developing and maintaining security policies, procedures, and standards.
• Knowledge of relevant security regulations and industry standards (e.g., PCI-DSS, HIPAA, GDPR).
• Experience in managing firewall policies and analyzing firewall logs.
• Excellent communication, collaboration, and leadership skills.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.