IT Security Manager, Piclo

• Bachelor's degree in Computer Science, Information Technology, or a related field
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other similar credentials
• Minimum of 8 years' experience in IT security, with proven experience in risk mitigation, incident management and the design and delivery of security training programs
• Proficient in managing and securing Google Workspace, Microsoft 365, and other digital tools within a regulated environment
• Strong understanding of the latest security principles, techniques, and protocols, including GDPR compliance, ISO 27001/9001 and related privacy regulations
• Experience in international IT security management, and familiarity with IT legislation in APAC, North America, and Europe would be highly advantageous

Desirable

• As our IT Security Manager, you will be responsible for ensuring the security and seamless operation of our internal systems, with a specific focus on Google Workspace, Microsoft 365, and other digital tools and services. Responsibilities will include the following:
• You'll provide hands-on tech support for our internal users, and implement security policies, frameworks, and procedures
• You’ll work closely with the CTO and the Cyber Security Specialist, and the Business Operations team, helping bridge the gap between our IT and our large enterprise customers
• Design, implement, and maintain IT security policies, procedures, and controls for internal systems to ensure data accuracy, security, and regulatory compliance, including compliance with GDPR
• Lead incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches as necessary
• Serve as a focal point for IT security, providing authoritative advice and guidance on the application and operation of all types of internal security controls, security risk assessment, and risk management
• Oversee the provisioning and management of IT equipment and resources, ensuring all assets are tracked, maintained, and secured and that they adhere to the IT security standards and regulations of the regions we operate in
• Manage and oversee the usage and security of Google Workspace, Microsoft 365, and other digital tools and services to ensure compliance with region-specific security and regulatory requirements, as we expand into new markets such as APAC, North America, and Europe
• Act as the primary tech support resource within the company, providing hands-on assistance and troubleshooting for internal users, primarily on Apple machines
• Undertake supplier selection processes for digital tools and services, coordinating requirements across the business
• Provide guidance, and training to teams across the business on security trends, security awareness, and best practices
• Collaborate with the Cyber Security Specialist to ensure cohesive security measures across the organisation's SaaS product and internal systems
• Work closely with the CTO and the Business Operations team to develop strategic security plans and budget forecasts, ensuring we are equipped to handle IT and security requirements as we expand into APAC, North America, and Europe
• Establish and enforce protocols for the secure exchange of data with our customers, ensuring the integrity, confidentiality, and availability of information during transmission and at rest
• Collaborate with global teams and external stakeholders to ensure our IT practices meet local laws and regulations, bridging the gap between our IT capabilities and the expectations of our large enterprise customers in different regions

• Please include either a copy of your CV, the URLs for your personal site or Linkedin profile, as well as URLs to any relevant public repositories that might support your application
• Introductory call: we’ll invite you for a short video call to discuss your experience and what you’re looking for in your next role
• Challenge: If successful, applicants will be invited to complete a challenge relevant to the skills required in your role
• Final interview: if successful, applicants will then be invited to a final, in-depth interview to meet additional members of the team