Information Security Manager - GRC

📋 Description

• Lead development and execution of a comprehensive security governance strategy aligning
• Define and execute the GRC roadmap, prioritization, and investment plans.
• Own security service intake channel and portfolio management, ensuring visibility and coordination
• Develop AI governance models, policies, controls, and responsible technology adoption practices.
• Drive cyber risk management: risk identification, treatment, monitoring, remediation, and
• Manage IAM governance to support security, compliance, and business needs.

🎯 Requirements

• 10+ years in Information Security GRC with at least 5 years in leadership/management roles.
• Experience in complex, dynamic tech environments (technology companies, scale-ups, financial
• Strong expertise in security frameworks: NIST CSF 2.0, ISO 27001/27002, CIS Controls, SOX, ISO
• Proven ability to translate cybersecurity risks into financial/operational impact.
• Experience applying risk quantification methodologies such as FAIR.
• Experience designing KPI/KRI frameworks, maturity assessments, and executive reporting.

🎁 Benefits

• Competitive salary package.
• Profit-sharing opportunities.
• Meal allowance.
• Health insurance.
• Dental plan.
• Life insurance.