Manager - Information Security

About the role

A leading international fast-food brand with a strong presence in Sri Lanka is looking for an experienced Information Security Manager to strengthen its cybersecurity framework and information security operations. The vacancy is advertised by MyTech Jobs.

Key responsibilities

• Lead and manage the organization's Information Security Framework, ensuring effective governance and implementation of security policies, standards and controls.
• Oversee vulnerability assessments and penetration testing (VA/VAPT), ensuring timely remediation of identified risks.
• Manage internal and external stakeholders, vendors and service-level agreements (SLAs).
• Oversee security assets, configurations, updates and change management.
• Implement and continuously improve information security controls to strengthen the cybersecurity posture.
• Drive security awareness initiatives and maintain information security policies, procedures and documentation.

Required profile

• Master's degree in Information Technology, Computer Science, Information Security or a related field.
• 5-8 years of experience in Information Security, including 2-3 years in a supervisory or managerial role.
• Proven experience managing VA/VAPT programmes, vendor and SLA management, change management and security governance.
• Excellent stakeholder management, communication and coordination skills.
• Strong analytical, risk assessment and problem-solving abilities.
• High integrity, professionalism and discretion when handling sensitive information.