Information Technology Security Manager

About JiBe

JiBe is a cloud based fully integrated ERP system for the shipping industry. Our goal is to allow shipping companies to improve productivity, efficiency and safety levels, while reducing costs. JiBe ERP enables increased automation and streamlining of processes, creating pre-defined workflows and reducing the usage of email and paper.

Roles & Responsibilities:

Security Program Execution & Governance:

• Implement and maintain the organization’s information security, privacy, and data protection programs under the direction of the CISO.
• Ensure adherence to internal security policies and compliance mandates such as ISO 27001, SOC 2, and GDPR.
• Collaborate with business and technical teams to ensure unified security governance across business units.

Cloud Security Management:

• Lead and manage AWS Cloud Security operations, including configuration hardening, IAM governance, and security posture management.
• Oversee multi-cloud security environments (AWS, Azure, GCP) ensuring consistent governance, compliance, and threat monitoring.
• Implement and manage security controls such as encryption, network segmentation, cloud-native monitoring, and incident response automation.
• Work with DevOps and Infrastructure teams to embed security-by-design principles in cloud projects.

Security Operations Management:

• Oversee daily operations of key security functions—incident management, threat monitoring, vulnerability management, and risk assessment.
• Lead the coordination and response to security incidents, ensuring timely containment, remediation, and reporting.
• Define and monitor security KPIs and metrics to measure effectiveness and maturity of the security program.

Vulnerability Management & Risk Mitigation:

• Lead vulnerability assessments, penetration testing, and risk mitigation initiatives.
• Prioritize remediation based on business impact and coordinate patch management with IT teams.
• Ensure vulnerability management aligns with industry best practices and regulatory expectations.

Identity & Access Management (IAM):

• Oversee IAM operations including role-based access control (RBAC), provisioning, and privileged account management.
• Ensure access policies are aligned with least-privilege and zero-trust principles.

Policy, Compliance, & Audit:

• Drive the implementation and review of corporate security policies and standards.
• Support internal and external security audits, certifications, and regulatory compliance activities.
• Ensure documentation and processes align with frameworks like ISO 27001, NIST,
• and SOC standards.

Security Awareness & Training:

• Oversee security awareness initiatives, phishing simulations, and training programs across business units.
• Promote a culture of proactive security awareness throughout the organization.

Team Leadership & Mentoring:

• Lead and mentor a team of security professionals across domains such as network, application, and cloud security.
• Provide technical direction, performance management, and career development support.
• Foster collaboration between security, IT, and business teams to ensure shared accountability for security outcomes.

Regulatory & Threat Intelligence Monitoring:

• Continuously monitor the regulatory landscape and evolving cybersecurity threats.
• Integrate threat intelligence insights into the organization’s risk management framework.
• Maintain readiness for emerging threats through proactive defense strategies.

Collaboration & Strategic Alignment:

• Support the CISO in defining and executing the overall security strategy.
• Collaborate with IT, Compliance, and Legal teams to ensure cohesive implementation of security programs.
• Evaluate and recommend new technologies, tools, and practices to enhance security maturity.

Key Skills:

Education:

• Any Graduate or equivalent degree in Information Technology, Computer Science, or related discipline

Security Technologies:

• Strong knowledge of enterprise security controls: firewalls, SIEM, IDS/IPS, DLP, endpoint protection, and email security solutions.
• Experience with modern security architectures including zero trust, micro-segmentation, and secure network design.

Cloud Platforms:

• Proven hands-on experience in AWS Security Management (IAM, KMS, GuardDuty, CloudTrail, Security Hub, WAF, etc.).
• Exposure to Azure and GCP security frameworks, cloud posture management, and compliance controls.
• Familiarity with cloud-native monitoring and logging tools.

Security Frameworks & Standards:

• Deep understanding of ISO 27001/27002, SOC 1 & 2, NIST CSF, GDPR, and other data protection regulations.
• Experience managing audit and certification processes.

Security Tools:

• Proficiency with tools such as Nessus, Qualys, Burp Suite, Splunk, Wireshark, and vulnerability management systems.
• Knowledge of SOAR platforms and security automation practices.

Soft Skills:

• Strong analytical, leadership, and decision-making abilities.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities under pressure with meticulous attention to detail.
• Collaborative and approachable, with strong interpersonal and stakeholder management skills.

Certifications (Preferred but not Mandatory):

• CISSP, CISM, CCSP, or AWS Certified Security – Specialty are highly desirable.
• Additional certifications like ISO 27001 LA/LI, CompTIA Security+, or CEH are an advantage.