Manager – Information Security & Compliance

About the role

We are seeking a Manager – Information Security & Compliance to lead our digital services team in Colombo. The role will oversee the design, implementation and continuous improvement of information security and compliance programmes.

Key responsibilities

• Develop, implement and maintain the organisation’s ISO 27001 and PCI DSS frameworks.
• Define, enforce and monitor security policies, standards and controls.
• Conduct risk assessments and manage remediation activities.
• Coordinate internal and external audits and ensure compliance with regulatory requirements.
• Provide guidance and training to staff on information security best practices.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Management Information Systems or a related field.
• Professional certifications such as CISA, CISM, CRISC or CISSP are advantageous.
• Proven experience in developing and maintaining ISO 27001 and PCI DSS compliance programmes.
• Strong understanding of information security, compliance, policies, standards and controls.

Required skills

• ISO 27001
• PCI DSS
• Information security governance
• Compliance management