At Gaditek, our talent is not just exceptional - it's world-class! Our unstoppable team of 800+ employees is the best and the brightest, driving innovation across 7 Global SaaS Brands in 6 hottest industries, including Cyber Security, Digital Media, Managed Cloud, Affiliate Marketing, E-Commerce, Web.3.0, and Venture Building as a Service.
Our team is made up of dreamers, doers, and all-around rockstars who are committed to making a difference. As a result, we’re among the best companies to work for, with a plethora of benefits and an amazing culture.
The Senior Manager Information Security is responsible for overseeing the daily operations of the Business Security department, including budgeting, team management, and training. This role serves as the primary point of contact for business units (BUs) regarding cybersecurity needs, ensuring the implementation and enforcement of security policies, strategies, and programs. The Senior Manager will work closely with various stakeholders to maintain the organization’s overall security posture and address any security-related requirements.
Policy and Procedure Development: Design and implement business security policies and procedures. Ensure these policies are communicated effectively and adhered to across the organization.
Security Strategy Implementation: Develop and execute security strategies that cover infrastructure, network, applications, and SaaS platforms to ensure a robust overall security posture.
Vulnerability Management: Establish and oversee a vulnerability management program. Work with stakeholders to address vulnerabilities, maintain records, and report on vulnerability metrics.
Technology Assessment: Collaborate with technology teams to evaluate new technologies and developments, providing security assessments and recommendations to ensure they meet business security requirements.
Compliance and Audits: Manage compliance and audit activities to ensure adherence to security standards and processes. Facilitate internal and external assessments and implement necessary changes based on findings.
Incident Management: Develop and enforce an incident management program. Respond to and investigate escalated security incidents, coordinate recovery efforts, and ensure proper documentation and closure of incidents.
Training and Awareness: Create and implement business security awareness and training programs for new employees, existing staff, and vendors/contractors. Ensure ongoing training and awareness initiatives are effectively executed.
Budget Management: Develop, propose, and manage the budget for the Business Security department. Ensure financial resources are allocated efficiently and in alignment with departmental goals.
SIEM Infrastructure: Establish and maintain Security Information and Event Management (SIEM) systems. Oversee the monitoring of SIEM to ensure effective alerting, event identification, and incident response.
Risk Management: Conduct annual reviews and updates of the risk management program. Identify and assess risks, implement controls, and assign risk owners to ensure effective risk mitigation.
Bachelor’s Degree in Computer Engineering, Information Technology, Information Security, or a related field from an accredited university.
Proven experience implementing IT Security Controls and compliance with ISO 27001 standards, including Risk Management and Business Resilience.
12-15 years of Experience managing both on-premises and cloud-based platforms.
Certifications such as CISSP, CISM, or CRISC.
Advanced degree or additional relevant certifications.
Background in both industry and consultancy settings, demonstrating expertise in security management.
Strong understanding of cross-functional platforms and cybersecurity principles.
Excellent communication skills, with the ability to respond promptly to team queries and manage stakeholder relationships effectively.
Customer-centric approach with a focus on service quality and issue resolution.
The role requires a proactive approach to stay updated with emerging threats, security technologies, and best practices. Continuous improvement initiatives are essential to enhance the effectiveness of security operations and incident response processes.
Collaboration with cross-functional teams is essential to implement security controls, address vulnerabilities, and respond to security incidents promptly. The role involves working closely with technoloy teams, compliance professionals, and other stakeholders to achieve security objectives.
Join Gaditek for an extraordinary work experience!
Fast-paced careers, competitive packages, comprehensive wellbeing programs, extensive
medical coverage, continuous learning opportunities, generous perks, and an exceptional
employee experience await you.
Embrace a fulfilling journey with us today!
Note: Please login to apply if you already have a account