Information Security Manager - Colombia

About the role

The company is looking for an experienced Information Security Manager to lead and execute the Information Security strategy for Colombia. The role protects information assets, manages cyber risk, ensures regulatory compliance and aligns with global security standards. It combines strategic leadership with hands-on cybersecurity expertise and serves as the main security advisor to local leadership.

Key responsibilities

• Lead the local Information Security program aligned with regional and global objectives and act as the main point of contact for cybersecurity matters in the country
• Advise local leadership and executives on security risks and mitigation strategies, adapting global initiatives to local needs
• Identify, assess and manage risks; maintain the local risk register and remediation plans
• Support security reviews of new technologies, business initiatives and third-party services, and coordinate internal and external audits
• Ensure compliance with corporate policies, industry standards and regulations
• Lead local incident coordination, conduct initial investigations and work with regional and global teams
• Monitor alerts and vulnerabilities, support vulnerability management, and run incident response exercises and security testing
• Develop and deliver security awareness and training, and assess vendor and partner security risks

Required profile

• Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, Information Technology or a related field
• 5+ years in Information Security or Cybersecurity, including 3+ years leading security programs, initiatives or teams
• Experience in cyber risk management, compliance, audits, security governance and incident investigations
• Advanced English (written and verbal)
• Preferred: Master's degree and certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer or Security+

Required skills

• Frameworks: ISO 27001, NIST, CIS Controls, COBIT
• Preferred: Microsoft Entra ID / Active Directory, IAM, MFA and Conditional Access, SIEM, EDR, vulnerability management, cloud and network security, third-party risk management