Job Description

IT Security Manager

Key Responsibilities:

Governance

• Develop, maintain, and enforce IT security policies, standards, and procedures.
• Support internal governance frameworks and ensure alignment with industry best practices.
• Assist in the implementation of security awareness programs.

Risk Management

• Identify, assess, and monitor IT and business risks.
• Conduct risk assessments and recommend mitigation strategies.
• Maintain risk registers and track remediation efforts.

Compliance

• Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).
• Coordinate internal and external audits and support audit readiness.
• Monitor and report on compliance status and gaps.

Control Implementation

• Work with cross-functional teams to implement technical and administrative controls.
• Evaluate the effectiveness of existing controls and recommend improvements.

Reporting & Documentation

• Prepare reports for management on risk posture, compliance status, and audit findings.
• Maintain documentation related to policies, procedures, and compliance activities.

Required Skills & Qualifications:

• Strong experience in GRC, IT audit, or cybersecurity.
• Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).
• Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).
• Excellent analytical, communication, and documentation skills.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.

Job Tags

Similar Jobs