Senior Information Security Manager

About the role

Protego is seeking a Senior Information Security Manager to lead its technical and compliance security practice. You will own strategy, certification services, and client delivery while mentoring a Junior Information Security Analyst.

Key responsibilities

• Lead ISO 27001 gap assessments, ISMS implementation, and certification‑readiness consulting.
• Deliver virtual CISO (vCISO) engagements and act as outsourced security leadership for clients.
• Manage risk assessments, risk registers, and third‑party/vendor risk engagements.
• Provide regulatory advisory for GDPR, SOC 2, ISO 27701, PCI DSS, and other data‑protection frameworks.
• Oversee technical assurance activities such as penetration testing, secure code review, cloud security posture assessment, architecture reviews, and vulnerability management.
• Run managed security and IT governance services including endpoint monitoring, access & identity governance, and incident response planning.
• Maintain relationships with certification bodies and ensure audit, surveillance, and recertification processes.
• Mentor and direct the Junior Information Security Analyst and contribute to service offering development.

Required profile

• Proven leadership experience in information security service delivery.
• Ability to balance hands‑on technical work with client account ownership.
• Experience mentoring junior staff and driving service quality.

Required skills

• ISO 27001 gap assessment and ISMS implementation.
• Virtual CISO (vCISO) service delivery.
• Risk assessment and risk register management.
• Third‑party/vendor risk management.
• Regulatory compliance expertise (GDPR, SOC 2, ISO 27701, PCI DSS).
• Penetration testing and secure code review.
• Cloud security posture assessment.
• Architecture and configuration review.
• Vulnerability management.
• Endpoint security monitoring.
• Access and identity governance.
• Incident response planning.