Security Transformation Manager

Job Title

Manager for Info Sec – Tools & Operations -Inventory team

Management Level

Level 7 - Security Transformation Manager

Role Description

The Information Security Manager is responsible for leading the organization's information security initiatives, ensuring effective governance, risk management, compliance, security operations, and protection of enterprise assets. The role partners with business, technology, and security teams to establish a strong security posture and support regulatory and organizational requirements

Key Responsibilities

§  Lead and manage information security programs, policies, standards, and governance processes.

§  Oversee security asset inventory, asset classification, ownership, and lifecycle management. [

§  Ensure compliance with security frameworks, regulatory requirements, and internal policies (e.g., ISO 27001).

§  Conduct risk assessments and drive remediation plans to mitigate identified secure asset inventory discrepancies security risks.

§  Manage security operations, security governance, and incident response coordination.

§  Partner with infrastructure, cloud, application, and business teams to improve security controls and governance.

§  Define and enforce security-related Standard Operating Procedures (SOPs).

§  Establish security metrics, dashboards, and executive reporting on risk, compliance, and operational effectiveness.

§  Drive automation and continuous improvement initiatives to enhance security visibility and operational efficiency.

§  Lead, mentor, and develop security professionals while managing performance and capability growth.

§  Support audits, regulatory reviews, and stakeholder engagements.

Required Qualifications

§  Bachelor's degree in any domain

§  10+ years of experience in Information Security, Cybersecurity, Risk Management, or Security Operations.

§  3+ years of leadership or people management experience.

§  Excellent problem-solving, stakeholder management, and communication skills 

§  Strong understanding of: Information Security Governance, Risk Management, Security Operations, Cloud Security, Vulnerability Management, Incident Response, Security Architecture & Compliance Frameworks (ISO 27001, NIST, CIS, etc.)

Good too have

• Certification such as CISSP, CISM
• Experience in automation tools for reconciliations
• Prior involvement in security tool deployment or vulnerability management integration

Additional Comments