Information Security Manager

Job Summary

Managing the internal IT function, the full-time remote Information Security Manager will develop and implement the information security strategy, oversee compliance with ISMS standards, and coordinate responses to security incidents.

Key responsibilities

• Drive the overall information security strategy and ensure compliance with SOC 2 and ISO 27001 standards
• Act as the primary escalation point for major security incidents and manage corrective actions
• Oversee security documentation, internal risk assessments, and vendor risk management processes

Required qualifications

• Proven experience in a senior information security leadership role, ideally within a SaaS or technology business
• Demonstrable experience in building and maturing an ISMS, including achieving SOC 2 and ISO 27001 certification
• Strong knowledge of security tooling and controls, including EDR, SIEM, and identity and access management
• Experience with GDPR and global data protection laws, including acting as a Data Protection Officer
• Relevant professional certification such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor is desirable