Cyber Security Manager

Job Summary

The Information / Cyber Security Manager is responsible for developing, implementing, and overseeing the organizations information security and cybersecurity strategy. This role ensures the confidentiality, integrity, and availability of systems and data while managing cyber risks, compliance requirements, and incident response activities.

Key Responsibilities

• Develop and maintain the organizations information security and cybersecurity framework, policies, and standards
• Lead risk assessments, vulnerability management, and security audits
• Monitor security systems (SIEM & SOAR, EDR, DLP, WAF etc.) to detect and respond to threats
• Manage incident response, investigation, containment, and post-incident reporting
• Ensure compliance with relevant regulations and standards (e.g., ISO 27001, NIST, GDPR & DPDP)
• Oversee identity and access management, data protection, and encryption practices
• Collaborate with IT development team, legal, compliance, and business teams to embed security into operations.
• Manage third-party/vendor security assessments and risk reviews
• Prepare and present security metrics, risk reports, and recommendations to senior management
• Conduct security awareness and training programs for employees.
• Should have good exposer on Identity protection.
• Should have good exposer on information classification.
• Good knowledge on Open Source & Windows Operating system.
• Good knowledge on Active Directory Security, Group Policy, Kerberos, NTLM, SSO, Windows Event log & hardening.
• Should have good exposer on Privileged Access Management (PAM) & Identity lifecycle management.
• Should have good exposer on Networking & Network Security TCP/IP, DNS, DHCP, \HTTP/S, Firewalls (stateful, NGFW), IDS/IPS (Snort, Suricata), VPNs (IPSec, SSL), Network segmentation & zero trust.

Core Security Fundamentals (Must-Have)

• CIA Triad (Confidentiality, Integrity, Availability)
• Threat modeling (STRIDE, MITRE ATT&CK & framework)
• Risk assessment & management
• Security policies, standards & procedures
• Vulnerability management lifecycle

Required Qualifications

• Bachelors degree in information security, Computer Science, IT, or a related field
• 4 to 5 years of experience in information security or cybersecurity.
• Strong knowledge of security architectures, networks, cloud security, and operating systems
• Hands-on experience with security tools and technologies
• Solid understanding of risk management and regulatory compliance

Preferred Certifications

• CISSP, CISM, CISA, CRISC, CEH, or equivalent certifications

ISO 27001 Lead Implementer / Lead Auditor (preferred)

Key Skills

• Cyber risk assessment and management
• Incident response and forensics
• Security governance and policy development
• Cloud security (AWS, Azure, GCP)
• Strong communication and stakeholder management skills
• Strategic thinking with hands-on execution capability