Senior Manager - Information Security (Secure SDLC)

About the role

The organization is looking for an experienced Senior Manager of Information Security to lead its security initiatives, with a focus on secure software development lifecycle (SDLC) and strategic leadership. The role suits someone with a strong background in managing complex security programs, leading teams and ensuring robust security practices across the organization.

Key responsibilities

• Lead and manage the vulnerability management and application security programs, covering identification, analysis and remediation of security risks.
• Integrate security practices into the SDLC with development and operations teams, using DevSecOps, automation and compliance tools.
• Plan and run annual penetration testing across all applications used in MBPL.
• Lead and mentor a team of security professionals and foster a culture of continuous learning.
• Oversee IT compliance assessments, including NIST 800-53 and the NIST Cybersecurity Framework, and certify platforms after security reviews.
• Monitor the threat landscape, develop mitigation plans and report to senior management and governance committees.
• Evaluate and implement advanced security tools, and work with executive leadership on information security strategy.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity or a related field.
• 8 to 12 years of information security experience, including significant leadership and team management.
• Minimum of two advanced security certifications such as CISSP, CISM, CISA, GCED, CeH or Azure Security.
• Experience building and leading security teams, and in cybersecurity risk management and strategy.
• Preferred: banking or financial services experience, cloud security familiarity, incident response experience, and experience budgeting security programs.

Required skills

• Vulnerability management, penetration testing and application security assessments (SAST, DAST, IAST).
• Knowledge of NIST 800-53, the NIST Cybersecurity Framework and OWASP.
• Security tools, networking, operating systems and application development.