Information Security Manager

Overview

We are looking for an experienced Information Security Manager to join the our Engineering team. The ideal candidate will be responsible for ensuring the security and compliance of our SaaS platform, as well as developing, implementing and maintaining policies related to Information Security. This role requires extensive knowledge of GDPR, SOC2, ISO 27001 and other certifications relating to data protection and security.

Responsibilities

• Lead Horizons certification efforts (SOC2, ISO 27001)

• Coordinate external pen-testing efforts

• Fill out security questionnaires from customers and partners

• Audit systems internally against industry standard information security frameworks

• Develop comprehensive IT security strategies that align with the business objectives

• Maintaining risk registry

• Coach internal teams about best security and compliance practices

• Coordinate implementation of controls such as firewalls or encryption protocols with DevOps team

• Enhance existing security solutions by researching new technologies and making recommendations on implementation

• Ensure compliance with applicable laws and industry standards (e.g. GDPR)

• Identify areas in which the organization is exposed to cyber threats or potential data breaches

• Oversee incident response planning and execution

• Oversee the information security goals, objectives, and metrics

• Maintain a roadmap to mature services and add new capabilities

• Evaluate potential business impacts from security breaches and providing strategic and tactical guidance to business decision-makers

Requirements

• Bachelor’s degree in Computer Science or a related field

• At least 5 years of experience working in Information Security or IT Manager roles

• Extensive knowledge of relevant regulatory requirements (SOC2, ISO 27001, etc.)

• Proven track record of successful development & implementation of security strategies

• Excellent project management skills

• Strong communication and presentation skills

• Professional proficiency in written and spoken English

Preferred Skills

• Experience working in a Startup environment, preferably building a SaaS product

• Previous work experience with a third party security solution, preferably Vanta or Tugboat

• Expertise with managing Cloud Infrastructure, preferably AWS

• Take ownership in what you do and always look for improvements

• Set high standards for others and for yourself

Why Join Us

• Growing international Engineering team on two continents (Asia and Europe), working on in-house product

• Chance to contribute to cutting-edge projects and technologies

• Competitive compensation package and comprehensive benefits

• Continuous learning and development opportunities

If you're passionate about strengthening security and business compliance, and enjoy working in a supportive team environment, we encourage you to apply and become a valuable part of our IT team.