Information Security Manager

About the role

The Information Security Manager will lead governance, risk and compliance activities for a banking environment. You will ensure that security policies, standards and procedures align with international frameworks and internal directives, supporting business growth while protecting critical assets.

Key responsibilities

• Develop, maintain and enforce cyber and information security policies, directives, and standards.
• Conduct hands‑on security and gap assessments, identify vulnerabilities and recommend remediation controls.
• Collaborate with business leaders to drive security risk to acceptable levels across the group.
• Oversee implementation and verification of risk response measures and monitor remediation progress.
• Manage the ISO 27001 Information Security Management System, including recertification.
• Coordinate third‑party assessments, periodic compliance reviews and maintain a knowledge repository.
• Produce risk profiles, monitor compliance with group policies, and propose policy enhancements.

Required profile

• Minimum 10 years of experience in information security governance, assessment and compliance, preferably in banking or financial services.
• Academic background: Bachelor’s or Master’s degree in Computer Science, IT or related field.
• Professional certifications such as CISA, CISM, CISSP, CEH or ISO 27001 Lead Implementer.
• Strong ability to understand complex technical and business environments.

Required skills

• Databases
• Operating systems
• Network technologies
• User management
• Encryption & cryptography
• Change management
• Backup management
• Security technologies
• ISO 27000 series
• OWASP
• PCI DSS
• SWIFT CSCF