Senior Information Security Manager

Job Overview

We are looking for a hands-on Senior Information Security professional to support day-to-day security operations, incident response, vulnerability management, and compliance activities in a regulated environment. The role is operational in nature and requires close coordination with SOC, infrastructure, and audit teams.

Note: This is a hands-on security operations role, not a pure governance or policy-only position.

Key Responsibilities

• Maintain and publish Information Security policies, procedures, standards, and guidelines aligned with best practices and compliance requirements

• Perform baseline security scans, hardening checks, and compliance monitoring

• Handle and investigate security incidents and alerts from SOC teams and security tools

• Review and follow up on SIEM alerts (Splunk, ArcSight, and similar platforms)

• Conduct user and system access reviews, including privileged accounts

• Review and assess reported phishing emails and coordinate response actions

• Track and manage security advisories and follow up remediation actions

• Perform Vulnerability Assessments (VA) and generate reports for servers, networks, and web applications

• Coordinate remediation and risk mitigation with infrastructure, application, and operations teams

• Support patch management, ensuring patches are applied within defined timelines

• Liaise with auditors and support IT security audits, tracking issues to closure

• Prepare and deliver periodic security status reports to management

• Escalate critical security risks, incidents, or policy violations

• Act as the point of contact for ICT security matters

Required Skills & Experience

• 3-5 years of hands-on experience in Information Security / Cyber Security operations

• Strong experience in SIEM monitoring and incident handling (Splunk, ArcSight preferred)

• Experience in vulnerability management, remediation tracking, and patch compliance

• Exposure to security incident response, phishing analysis, and access reviews

• Experience supporting security audits and compliance activities

• Ability to work independently in an operational, fast-paced environment

• Strong communication and stakeholder coordination skills