Information Security Manager
US Based Company for IT Services
PKR 1,200,000 • Published Date: • Pakistan (Hybrid)
Description
The Information Security Manager is a strategic and technical leader responsible for safeguarding information assets and overseeing security operations, vulnerability management, incident response, security assessments, and compliance activities.
Responsibilities
What you’ll do as the Information Security Manager:
Employees employed in the role of Information Security Manager shall be required to apply their independent mind and demonstrate intellectual abilities in their decision-making.
The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Ensure alignment with ISO 27001, ISO 27701, PCI-DSS, SOC 2, NIST, and related frameworks.
Develop and maintain incident-response playbooks, compliance reports, and security documentation.
Lead penetration testing, vulnerability assessments, remediation tracking, and patch-governance activities.
Coordinate blue-team operations, incident response, threat detection, and security exercises.
Handle customer security questionnaires, audit requests, DPAs, and security-related agreements.
Assess security tools, lead awareness programs, and provide actionable risk insights to leadership.
Manage a team of Security Analysts in support of these initiatives.
What you will bring to the team:
Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
Strong experience leading information security operations, audit, compliance, and vulnerability management.
CISSP, CISM, or comparable security certification preferred.
Knowledge of incident response, threat detection, penetration testing, and security frameworks.
Strong leadership, communication, stakeholder-management, and continuous-improvement capabilities.
Experience
10 Years
Apply By
Required Skills
- Audit
- Security Incident Management
- Risk Management
- NIST
- SOC 2
- PCI-DSS
- ISO 27701
- ISO 27001
- Stakeholder Management
- Communication
- Leadership
- Security Frameworks
- Penetration Testing
- Threat Detection
- Incident Response
- Vulnerability Management
- Compliance
- Information Security Operations
Nice to Have Skills
- CISSP
- CISM
- Security Certification
- Team Management