Information Security Manager

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Take ownership of and continually enhance the company's information security and compliance program.

• Spearhead the implementation of ISO 27001, prepare for certification, and drive ongoing compliance efforts.

• Perform security assessments and risk analyses across systems, endpoints, cloud platforms, and networks.

• Create, execute, and uphold information security policies, procedures, and standards.

• Develop and oversee incident response strategies and manage security incident investigations.

• Handle Identity and Access Management (IAM), which includes conducting access reviews and enforcing least privilege principles.

• Assess, implement, and sustain security technologies including endpoint protection, SIEM, MFA, email security, and related tools.

• Facilitate employee security awareness training and conduct phishing simulation exercises.

• Collaborate with IT leadership on infrastructure decisions while independently recognizing and reporting security risks.

• Ensure audit preparedness, maintain compliance documentation, and oversee security governance processes.

• Aid in the continuous enhancement of regulatory compliance initiatives and security controls.

⛳️ Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related discipline.

• At least 5 years of experience in information security roles.

• Demonstrated experience in implementing or significantly enhancing information security and compliance programs.

• Direct experience with ISO 27001 implementation, audit preparation, or maintenance of certification.

• Practical experience with network, endpoint, cloud, and identity security.

• Experience in leading security incident response efforts.

• Proficient in written and spoken English at a B2 level or above.

• Familiarity with Identity and Access Management (IAM) and security governance practices.

• Knowledge of security technologies such as SIEM, endpoint protection, MFA, and email security solutions.

• Strong grasp of risk assessment methodologies and security best practices.

• Experience working in international settings is an advantage.

• Professional certifications such as CISSP, CISM, Security+, or equivalents are advantageous.

• Experience in engineering, professional services, or AEC environments is beneficial.

• Knowledge of data protection regulations pertinent to engineering and design services is a plus.

• Proficient in Microsoft Office (Word, Excel, Outlook).

• Capability to prioritize multiple initiatives in a fast-paced environment.

• Strong analytical, organizational, and communication abilities.

• Ability to effectively communicate technical concepts to both technical and non-technical audiences.

🏝️ Benefits

• Opportunity to work in a high-tech industry for an international organization.

• Involvement in unique, innovative data center projects.

• Dynamic work environment collaborating with a team of engineering professionals.

• Competitive hourly compensation.

• Flexibility to collaborate remotely.

• Supportive and dynamic workplace culture.

• Access to English language classes.