Information Technology Security Manager

We are looking for an experienced

Security Manager

to lead cybersecurity governance, risk, compliance, and operational security for large-scale public sector projects. You will work closely with government stakeholders, auditors, vendors, and technology teams to ensure systems and infrastructure maintain a strong and compliant security posture throughout their lifecycle.

Key Responsibilities

Lead cybersecurity

governance, risk management, compliance, and security assurance

activities.

Establish and maintain security policies, standards, procedures, and governance frameworks.

Manage security accreditation activities including

VA/PT, security assessments, remediation, and closure

.

Oversee vulnerability management, patch governance, security monitoring, and incident response.

Ensure security controls and

Secure-by-Design / Security-by-Default

principles are implemented across applications and infrastructure.

Act as the primary cybersecurity contact for government agencies, auditors, vendors, and project stakeholders.

Identify security risks and drive appropriate mitigation and continuous improvement initiatives.

Lead and mentor cybersecurity personnel and promote security awareness across project teams.

Provide management with security posture, risk, compliance, and remediation updates.

Requirements

Degree in Cybersecurity, Information Security, Computer Science, or related discipline.

8+ years of cybersecurity experience

, including 3–5 years in a leadership role.

Strong experience in

cybersecurity governance, risk, compliance, security operations, and assurance

.

Experience managing vulnerability assessments, penetration testing, remediation, and security audits.

Good understanding of security controls across applications, infrastructure, and enterprise environments.

Experience with Government or other highly regulated environments is advantageous.

Knowledge of

ISO/IEC 27001, ISO 9001 and ISO/IEC 12207

is beneficial.

Strong stakeholder management, leadership, communication, and reporting skills.

Certifications such as

CISSP, CISM, CRISC, CCSP or ISO 27001 Lead Auditor

are highly desirable.