Security Manager

Job description

Responsibilities

• Protects both internal service delivery assets and client facing managed services

Compliance & Auditing

• Ensure strict alignment with industry-standard frameworks (e.g., ISO 27001, PCI-DSS). Lead governance adherence, internal audits, and external client compliance assessments

Stakeholder & Client Management

• oServe as the primary point of contact for client security inquiries, presenting security metrics, risks, and proposed mitigation controls oDirect engagement with customer to provide technical expertise and guidance regarding the optimization of the managed security environment

Policies and Governance

• Work closely with stakeholders, review security policies of the existing environment
• Direct the development, implementation, and enforcement of InfoSec policies, cybersecurity roadmaps, and incident response plans
• Develop, implement, and maintain the firm's sustainable information security framework, policies, and risk management plans

Operational and Implementation

• Establishes, implements, and upgrades an organization’s cybersecurity measures to protect networks and systems from potential attacks
• Coordinate rapid triage, response, and post-mortems for any security breaches or service disruptions
• Execute existing configurations, security policies and identify areas of improvement
• Provide analysis report on existing current and areas of improvement

Create Security Awareness

• Collect existing materials of security awareness. Prepare for the security awareness training

Vendor Management

• Manage third-party technology vendor licensing, relationships, and budget planning Key Requirements & Qualifications:

Education & Certifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Industry-recognized certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) are highly preferred

Experience

• 5+ years of combined experience in IT security, risk management, and physical security management, preferably within a Managed Service Provider (MSP/MSSP) setting

Technical Acumen

• Strong knowledge of security architecture, including SIEM, SOAR, EDR/XDR, firewalls, and vulnerability management

Soft Skills

• Exceptional stakeholder management, crisis leadership, and problem-solving abilities to navigate complex, fast-paced environments #ASEAN1_Priority