Manager of Information Security

Stack

Responsibilities

• ▹Own and continuously improve the company's information security and compliance program
• ▹Lead ISO 27001 implementation, certification readiness and ongoing compliance initiatives
• ▹Conduct security assessments and risk evaluations across systems, endpoints, cloud environments and networks
• ▹Design, implement and maintain information security policies, procedures and standards
• ▹Develop and lead incident response planning and coordinate security incident investigations
• ▹Manage Identity and Access Management (IAM), including access reviews and least privilege enforcement
• ▹Evaluate, implement and maintain security technologies such as endpoint protection, SIEM, MFA and email security
• ▹Run employee security awareness training and phishing simulation programs
• ▹Partner with IT leadership on infrastructure decisions while independently identifying and communicating security risks
• ▹Maintain audit readiness, compliance documentation and security governance processes

Requirements

• ▹Bachelor's or Master's degree in Information Security, Computer Science, Information Technology, Cybersecurity or a related field
• ▹Minimum 5 years of experience in information security roles
• ▹Proven experience implementing or significantly improving information security and compliance programs
• ▹Direct experience with ISO 27001 implementation, audit preparation or certification maintenance
• ▹Hands-on experience with network, endpoint, cloud and identity security
• ▹Experience leading security incident response activities
• ▹Written and spoken English at B2 or higher
• ▹Experience with IAM and security governance
• ▹Familiarity with security technologies such as SIEM, endpoint protection, MFA and email security solutions
• ▹Strong understanding of risk assessment methodologies and security best practices
• ▹Microsoft Office proficiency (Word, Excel, Outlook)
• ▹Ability to prioritize multiple initiatives in a fast-paced environment

Nice to have

• ▹Experience working in international environments
• ▹Professional certifications such as CISSP, CISM, Security+ or equivalent
• ▹Experience in engineering, professional services or AEC environments
• ▹Familiarity with data protection regulations relevant to engineering and design services

Soft skills

What we offer

• ▹Long-term, ongoing engagement with an international company
• ▹Ability to collaborate remotely
• ▹Competitive hourly rate
• ▹Unique, cutting-edge data center projects
• ▹Supportive, dynamic environment
• ▹English classes
• ▹Work on high-profile, hyperscale and AI data center projects
• ▹Collaboration with leading professionals and global clients such as Microsoft, Oracle, Uber and Amazon

About the company

Ehvert Mission Critical is a business unit within Salas O’Brien, a 4,000-person engineering and professional services firm, specializing in the design and construction management of data centers. It designs hyperscale and AI data centers for global technology companies such as Microsoft, Uber, Oracle and Amazon.