Information Security Manager

About the role

The Information Security Manager will design, implement and lead YAP’s enterprise‑wide security program. Reporting to senior leadership, you will protect the company’s data, assets and reputation by aligning security initiatives with business objectives.

Key responsibilities

• Develop and maintain an information security strategy, policies, standards and procedures.
• Conduct regular risk assessments, threat modeling and implement mitigation controls.
• Ensure compliance with PCI DSS, ISO 27001 and other relevant frameworks; oversee third‑party vendor assessments.
• Protect sensitive data through DLP solutions and enforce data‑privacy regulations.
• Lead incident response, investigations, disaster recovery and business continuity planning.
• Oversee technical controls such as firewalls, IDS/IPS, endpoint protection and security monitoring tools.
• Perform vulnerability assessments, penetration testing and system hardening.
• Deliver security awareness training and produce regular security metrics reports for executives.
• Manage and develop the security team.

Required profile

• Minimum 5 years of progressive experience in information security or cybersecurity.
• Proven ability to manage security programs and lead teams.
• Strong understanding of risk management, compliance and incident response.

Required skills

• Firewalls
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Endpoint protection tools
• Data Loss Prevention (DLP) solutions
• PCI DSS
• ISO 27001
• Vulnerability assessment
• Penetration testing
• System hardening
• Security monitoring tools