Information Security Manager

Lead a team of Security Engineers responsible for designing, building, and operating scalable security systems that protect the organisation while enabling business innovation. This role requires a highly technical leader with hands-on experience in software development, system design, and platform engineering. The Manager, Security Engineering is accountable for delivering integrated security capabilities across identity, cloud, endpoint, and application domains. This includes evaluating technologies, making build vs. buy decisions, and driving the development of enterprise-grade systems that integrate across internal platforms and external partners.
Responsibilities:
Lead, Mentor, and Coach a team of Security Engineers, setting a high bar for technical excellence, ownership, and delivery.
Design and Build Security Systems: Own the architecture and implementation of scalable, resilient security platforms and services. Ensure solutions are designed for integration, automation, and long-term maintainability.
Hands-on Technical Leadership: Provide technical direction through system design, code reviews, and architectural decision-making. Actively contribute to design and development where needed.
Engineering-First Approach to Security: Drive the shift from manual, process-driven security controls to automated, system-enforced controls embedded in engineering workflows.
Build vs. Buy Decisions: Evaluate third-party technologies and platforms. Make informed decisions on when to build internally vs. leverage vendors, considering cost, scalability, risk, and integration complexity.
Platform Integration Ownership: Ensure security capabilities are integrated across enterprise systems (e. g., identity platforms, cloud environments, developer tooling, SIEM/SOAR, data platforms).
Program Execution: Deliver on key security engineering initiatives such as zero trust, identity lifecycle automation, cloud security posture, AI security enablement, and vulnerability management platforms.
Partner Across Stakeholders: Work closely with Engineering, IT, Cloud, GRC, and Product teams to design solutions that align with business needs while improving security posture.
Support Compliance Through Engineering: Partner with GRC and Compliance teams to implement technical controls that satisfy frameworks such as NIST, ISO 27001 and SOC 2 through scalable systems rather than manual processes.
Operational Excellence: Ensure systems are observable, reliable, and supported with strong operational practices (monitoring, alerting, incident response integration).
Requirements:
Strong software engineering background(e. g., Python, Go, Java, or similar) with experience building production systems.
Deep expertise in system design and architecture, including distributed systems and API-driven integrations.
Experience designing and operating security platforms(IAM, cloud security, endpoint, vulnerability management, etc. )
Ability to evaluate and integrate third-party security solutions into enterprise ecosystems.
Strong understanding of modern security principles(zero trust, identity-first security, defence-in-depth).
Experience with cloud platforms(AWS, Azure, GCP) and cloud-native architectures.
Excellent communication skills, with the ability to translate complex technical decisions into business impact.
Minimum Qualifications:
Bachelor's Degree in Computer Science, Engineering, or related technical field, or equivalent practical experience.
Demonstrated experience designing, building, and operating production systems at scale.
Prior experience in Security Engineering or closely related engineering disciplines.
Proven experience leading engineering teams and delivering complex technical initiatives.
Strong experience with coding, system integration, and automation.
Experience evaluating and implementing enterprise security technologies.
Preferred Qualifications:
Experience building internal security platforms (e. g., identity automation, security data pipelines, control validation systems).
Familiarity with infrastructure-as-code, CI/CD pipelines, and DevSecOps practices.
Experience with security frameworks (NIST 800-53 ISO 27001)from an implementation perspective.
Security certifications (CISSP, etc. ) are helpful but secondary to hands-on engineering experience.

Experience
10-14 yrs