Information Security Manager

• Develop and implement a comprehensive cybersecurity strategy aligned with Cogoport’s business objectives
• Collaborating with senior leadership as the primary authority for all security-related matters
• Oversee security governance and continuous security improvements across all business units
• Identify, assess, and mitigate cybersecurity risks across applications, cloud infrastructure, and corporate systems
• Conduct periodic security audits, risk assessments, and penetration testing to proactively address vulnerabilities
• Ensure compliance with ISO 27001, GDPR, SOC 2, NIST, and other industry security frameworks
• Develop, document, and maintain an incident response plan to manage and mitigate security breaches
• Oversee the implementation and management of security technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection
• Monitor network traffic for anomalies and cyber threats, taking immediate action against security incidents
• Lead incident detection, investigation, and response processes while minimizing business impact
• Conduct security awareness programs for employees to foster a security-first culture
• Work closely with IT, development, and DevOps teams to integrate security best practices into software development and cloud infrastructure
• Regularly communicate security threats, policies, and best practices to stakeholders and leadership

• 7+ years of experience in cybersecurity, risk management, and information security leadership
• Bachelor's/master’s degree in computer science, Information Security, or a related field
• Certifications: CISSP, CISM, CEH, or equivalent cybersecurity certifications (preferred)
• Expertise in risk assessment, penetration testing, and vulnerability management
• Hands-on experience with security tools such as SIEM (Splunk, IBM QRadar), endpoint protection, and cloud security solutions
• Strong knowledge of zero-trust security models, identity and access management (IAM), and security operations (SOC)
• Ability to effectively communicate security risks and strategies to both technical and non-technical stakeholders

Certifications: CISSP, CISM, CEH, or equivalent cybersecurity certifications