information security manager

Koc Finansman A.S.

<div>
 
 
 About the Role
 
 
 
 We are seeking an
 
 Information Security Manager
 
 who will play a key role in shaping and implementing our company&rsquo;s security strategy. This position requires both technical expertise and governance capabilities, ensuring compliance with regulatory requirements (BDDK, KVKK, NIST, CIS) while managing security technologies, processes, and audits. The role will collaborate closely with IT, software, legal, and infrastructure teams to strengthen our security posture and support our digital transformation journey. This position reports directly R&amp;D Director and focuses on process management rather than direct team management.
 
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 Security Strategy &amp; Governance
 
 
 <ol>
 <li>
 Define, implement, and maintain the company&rsquo;s information security strategy
 </li>
 <li>
 Develop security policies aligned with BDDK regulations, NIST, CIS benchmarks, and other global best practices
 </li>
 <li>
 Lead security awareness activities, including internal trainings and communication campaigns
 </li>
 <li>
 Manage regulatory, internal, and holding-level audits, including evidence preparation, coordination, and closure of findings
 </li>
 <li>
 Coordinate Business Continuity and Disaster Recovery (DR) testing, reporting results to senior management
 </li>
 <li>
 Oversee IT governance, policy, procedure, and documentation updates
 </li>
 </ol>
 
 
 Security Operations &amp; Tools
 
 
 <ol>
 <li>
 Manage endpoint ,data and database security solutions (EDR, DLP, Guardium, Titus, NAC)
 </li>
 <li>
 Ensure security of DevOps/Kubernetes environments with tools like Twistlock and Fortify
 </li>
 <li>
 Track IT asset inventory (servers, user devices, routers, switches, software compliance etc.) with systems like Asset Explorer and Jamf Pro
 </li>
 <li>
 Oversee vulnerability management (Nessus, Endpoint Central) and ensure timely remediation
 </li>
 <li>
 Administer MDM solutions for user devices and mobile security
 </li>
 </ol>
 
 
 SOC / SIEM Monitoring
 
 
 <ol>
 <li>
 Monitor and manage SIEM processes (QRadar)
 </li>
 <li>
 Ensure proper collection of server logs (Windows/Linux) and healthy agent operations
 </li>
 <li>
 Collaborate with Ko&ccedil;Sistem SOC for rule creation, alert definitions, and monthly review meetings
 </li>
 </ol>
 
 
 Testing &amp; Risk Management
 
 
 <ol>
 <li>
 Organize and coordinate penetration testing for applications, projects, and systems before go-live
 </li>
 <li>
 Follow up on Red Team test findings conducted by the Holding, ensuring mitigation actions
 </li>
 <li>
 Support risk assessments, impact analyses, and business continuity planning
 </li>
 </ol>
 
 
 Compliance &amp; Data Protection
 
 
 <ol>
 <li>
 Support KVKK processes in collaboration with the legal team, including data processing inventory, VERBIS registration, and annual updates
 </li>
 <li>
 Manage routine data disposal and incident response coordination in case of a data breach
 </li>
 <li>
 Ensure compliance with GDPR/KVKK technical and administrative safeguards
 </li>
 </ol>
 
 
 Vendor &amp; Procurement Management
 
 
 <ol>
 <li>
 Participate in security budget planning, procurement, and vendor management processes
 </li>
 <li>
 Conduct product research, POCs, proposal evaluations, and contract follow-ups
 </li>
 <li>
 Manage supplier due diligence processes (Ko&ccedil;diligence) and license/service renewals
 </li>
 <li>
 Oversee IT contract management and ensure seamless coordination with the Legal Department
 </li>
 </ol>
 
 
 Qualifications
 
 
 <ol>
 <li>
 Bachelor&rsquo;s degree in Computer Science, Engineering, or related field
 </li>
 <li>
 3&ndash;5 years of experience in information security, IT risk, and/or cybersecurity roles
 </li>
 <li>
 Hands-on experience with SIEM, SOC monitoring, and vulnerability management tools
 </li>
 <li>
 Familiarity with endpoint and data security solutions (SIEM, EDR, DLP, MDM, MAM, Guardium, Titus, NAC, etc.)
 </li>
 <li>
 Understanding of DevSecOps concepts and security in containerized environments (Kubernetes, Twistlock, Fortify)
 </li>
 <li>
 Knowledge of regulatory frameworks and standards (NIST, BDDK, KVKK, GDPR, CIS)
 </li>
 <li>
 Strong communication, coordination, and problem-solving skills
 </li>
 </ol>
 
 
 Why Join Us
 
 
 <ol>
 <li>
 Work in one of the largest financial services technology ecosystems in Turkey
 </li>
 <li>
 Take part in projects where security, compliance, and innovation are top priorities
 </li>
 <li>
 Collaborate with cross-functional teams in an environment that embraces digital transformation and cutting-edge technologies
 </li>
 <li>
 Opportunities for professional development, certifications, and exposure to new-generation security tools
 </li>
 <li>
 Be part of five star Certificated Agile Organization
 </li>
 <li>
 Be a part of Certificated Best Employer Company
 </li>
 </ol>
 
 
 
 
 
 &ldquo;6698 say&inodot;l&inodot; Ki&scedil;isel Verilerin Korunmas&inodot; Kanunu kapsam&inodot;nda ki&scedil;isel verilerinizin i&scedil;lenmesinden do&gbreve;an haklar&inodot;n&inodot;za ve bu konudaki detayl&inodot; bilgiye https://www.kocfinans.com.tr/tr/kariyer/kocfinansli-olmak adresinde yer alan ayd&inodot;nlatma metnimizden ula&scedil;abilirsiniz.&rdquo;
 
 
 
 
</div>

Information Security Manager

Oracle

<div>Job Description
Information Security Sr. Manager - Offensive Security
Oracle Cloud Infrastructure Group (United States)
The Oracle Cloud Infrastructure (OCI) Offensive Security team provides OCI with the capabilities to ensure our systems and services meet the security objectives we communicate to customers. The Offensive Security group performs security assessments, vulnerability research, static and dynamic analysis research, penetration testing, red-teaming, and security tool development. We ensure the security of the software and hardware that runs our cloud infrastructure and strive for continuous improvement. The OCI Offensive Security group works as a team. We don't fit people into predefined roles. We bring together the right people who enhance team capability and build roles around each team member's skills and interests.
Values are OCI's foundation and how we deliver excellence. We strive for equity, inclusion, and respect for all. We are committed to the greater good in our products and our actions. We are continually learning and taking opportunities to grow our careers and ourselves. We challenge each other to stretch beyond our past to build our future. You can learn more about us by visiting https://cloud.oracle.com/cloud-infrastructure .
Are you interested in building large-scale distributed security systems and tools for the cloud? Do you love the idea of working in an environment with the excitement of a start-up, but the financial backing of a Fortune 100 company? This role offers huge upside potential, high visibility, and fast career growth without the risks of a typical start-up. We are growing fast, maturing, and working on results-oriented initiatives. A security-focused leader can have significant technical and business impact. This is a unique opportunity to work with smart people to solve complex problems in distributed systems, security, and multi-tenant Infrastructure-as-a-Service (IaaS) operating at massive scale. The biggest challenges for the team is the dynamic and fast growth of the business, driving us to improve our systems, tools, and automation to scale to our security expertise several orders of magnitude greater than what we can support today. We understand that software is living and needs investment. The challenge is making the right tradeoffs, communicating those decisions effectively, and crisp execution. We hope you like working at scale as much as we do because Oracle has no shortage of it! Craft the future of one of the largest clouds on earth with us!
Our ideal candidate is a hardworking and hands-on leader concerned with both security and building the best team possible, a passionate leader about security and furthering their knowledge every day as well as their team, and has previous experience working in the cloud/hardware industry and leading a group of scary smart hackers that operate in a distributed, multi-tenant service infrastructure.
Qualifications
<ul><li>3+ years of management experience delivering and operating large scale, highly available distributed services
</li><li>5+ years of software engineering experience
</li><li>Strong overall business and communication skills, including executive presentation skills and eye for business
</li><li>Strong leadership and people management skills
</li><li>Understanding the importance of a balanced work approach to encourage team culture
</li><li>Strong knowledge of data structures, algorithms, operating systems, and distributed systems fundamentals
</li><li>Strong understanding of databases, NoSQL systems, storage and distributed persistence technologies
</li><li>Prior experience with Security
</li><li>Understanding of known security vulnerabilities and mitigations
</li><li>Programming and debugging fundamentals in languages/interfaces, such as C/C++, Java, Python, etc</li></ul></div>
 <div>Responsibilities
<ul><li>Leading a diverse set of personalities and talent
</li><li>Understanding the importance of a healthy and supportive team culture
</li><li>Support a culture of accountability, integrity and high expectations
</li><li>Effectively communicate to anyone in the organization, from the most technical operator to senior leadership
</li><li>Stay abreast of known vulnerabilities which can impact our cloud and customers, and work towards applying appropriate mitigations
</li><li>Guide and mentor the teams which perform security reviews, and clearly communicate their findings
</li><li>Drive implementation and verification of security features to enhance the security of our platforms
</li><li>Recommend methodologies for secure service development driving continuous improvement in the engineering organization - Including mentoring, developing, and delivering training materials as well as producing frameworks to reduce standard methodology patterns to an application for use in production efforts
</li><li>Collaborate to develop a long-term security roadmap for the features we invest in first
</li><li>Responsibly and securely disclose 3rd party vulnerabilities to vendors
</li><li>Provide direction and advice on emerging threats, weaknesses, and security practices that may impact the security posture of OCI
</li><li>Manage and lead the performance of security teams and security testing activities
</li><li>Be able to critically examine an organization and system through the perspective of a threat actor and articulate risks in clear, detailed terms.
</li><li>Guiding effective remediations and fixes in our platforms
</li><li>Demonstrate solid understanding of distributed networks, major operating systems and their associated peripherals</li></ul></div>

Information Security Snr Manager

JMark Services Inc.

<div><div>Information Systems Security Manager (ISSM) 
Location: McLean, VA
</div><div>Clearance: TS/SCI w/ Poly
</div><div>Position Overview</div>
<div>At JMark, protecting information systems is mission-critical. We are seeking Information Systems Security Managers (ISSMs) across multiple discipline levels to oversee the cybersecurity of classified and sensitive systems. This role ensures compliance with federal regulations, implements robust security controls, and manages risks to maintain the integrity, confidentiality, and availability of mission-essential information systems.</div>
<div>Key Responsibilities</div>
<div>Cybersecurity Oversight &amp; Compliance</div>
<ul><li>Oversee the cybersecurity posture of information systems, ensuring compliance with CMMC, NIST 800-181, and other federal standards.</li>
<li>Develop, implement, and monitor security controls to protect system integrity, confidentiality, and availability.</li>
</ul><div>Risk Assessment &amp; Vulnerability Management</div>
<ul><li>Conduct risk assessments to identify threats, vulnerabilities, and potential impacts.</li>
<li>Manage vulnerability remediation in coordination with system owners, administrators, and stakeholders.</li>
</ul><div>Policy Enforcement &amp; Reporting</div>
<ul><li>Enforce compliance with federal cybersecurity policies, regulations, and organizational standards.</li>
<li>Maintain documentation and prepare reports to support audits, inspections, and system accreditation.</li>
</ul><div>Continuous Monitoring &amp; Incident Response</div>
<ul><li>Monitor systems for security events and respond to incidents.</li>
<li>Recommend corrective and preventive actions and ensure secure system configurations.</li>
</ul><div>Success Factors</div>
<div>The ideal candidate will be:</div>
<ul><li>Cybersecurity-Savvy &amp; Compliance-Oriented &ndash; Expert in federal frameworks and regulations.</li>
<li>Analytical &amp; Risk-Focused &ndash; Skilled at identifying vulnerabilities and applying effective mitigations.</li>
<li>Detail-Oriented &amp; Proactive &ndash; Maintains precise documentation and anticipates emerging threats.</li>
<li>Collaborative &amp; Mission-Driven &ndash; Works across teams to align cybersecurity with operational objectives.</li>
</ul><div>Qualifications</div>
<div>Required</div>
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field.</li>
<li>0&ndash;15+ years of experience in information systems security, cybersecurity compliance, or ISSM roles (multi-discipline levels available).</li>
<li>Strong knowledge of NIST standards, RMF (Risk Management Framework), and federal cybersecurity regulations.</li>
<li>Experience in risk assessment, vulnerability management, and incident response.</li>
</ul><div>Preferred</div>
<ul><li>Experience supporting ODNI, IC, or DoD information security operations.</li>
<li>Cybersecurity certifications such as CISSP, CISM, CAP, or Security+.</li>
</ul><div>Why Join JMark?</div>
<div>At JMark, cybersecurity is the backbone of mission assurance. As an Information Systems Security Manager, you will safeguard critical systems, manage cyber risks, and ensure compliance to protect national security operations.</div>
<div>Your expertise. Our mission. One standard: excellence.</div></div><div></div>

Information Systems Security Manager (ISSM)

Solvere Technical Group

<div>Solvere Technical Group is seeking an Information System Security Manager III to provide support for IT and cybersecurity activities. 
 
Responsibilities:
<ul><li>Providing oversight in the following areas:</li>
<li>Testing, monitoring, troubleshooting, consultation, performance of analysis to ensure security controls are implemented, integration of new technology with IT security standards, technical writing, governance, and policy development/ management.</li>
<li>Development, monitoring, and execution of the Cybersecurity Program which includes Information Assessment and Authorization (A&amp;A) process and Risk Management Framework (RMF) services.</li>
</ul>
Target Education:
<ul><li>Master's degree in computer science, information technology, or an equivalent science, technology, engineering &amp; mathematics (STEM) degree from an accredited college or university.</li>
</ul>
Required Qualifications / Certifications:
<ul><li>Eight (8) years of experience coordinating with various levels of an organization to oversee and manage information security program implementation within the organization or other area of responsibility.</li>
<li>Must have managed cyber strategy, personnel, infrastructure, policy enforcement, emergency planning, security awareness, and/or other resources.</li>
<li>Baseline certifications: CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISPP.</li>
</ul>
Security:
<ul><li>Active Secret security clearance required.</li>
</ul>
Location:
<ul><li>Onsite in Philadelphia, Pennsylvania.</li>
</ul>
Travel:
<ul><li>Travel is expected with this position. Approximately (5) Five 1-week trips.</li>
</ul>
BENEFITS
Solvere offers a comprehensive and generous benefits package. The Solvere benefits package includes medical, dental, and vision insurance for the employee and/or families. Solvere also includes basic life insurance plus short- and long-term disability for the employee. Employees may elect to enroll in our company&rsquo;s 401k plan. Employees will also accrue paid time off and holidays. Additional voluntary options include supplemental insurance plans.
About the Company Visit: www.solveretechnical.com
Solvere Technical Group is committed to non-discrimination and equal employment opportunity. All qualified applicants will receive consideration for employment without discrimination based on disability, protected veteran status or any other characteristics protected by law.</div>

Information System Security Manager III

vFairs

<div>
 
 About Us
 
 
 
 
 Come Learn &amp; Grow With us
 
 
 
 Unicorn Technology
 
 
 We&rsquo;re top-rated on G2 and Capterra with over 1000+ reviews by our amazing customers. We're pioneers of innovation and transparency and that shows with the type of technology we offer.
 
 
 A Diverse Team
 
 
 vFairs' diverse workforce brings contributors from all over the world, each person having their own skills and unique experiences.
 
 
 Serving Our Communities
 
 
 We go by the principle &ldquo;No enterprise can be more successful than goodness&rdquo;, and hence all employees are entitled to 2 days of paid leave a year to serve a social service to their local or global community through volunteerism.
 
 
 Green And Global - We Walk the Walk
 
 
 In 2022, we launched our Green and Global campaign where we make it a priority to lower both our and our customer&rsquo;s carbon footprint. All of our policies follow the guidelines of our G&amp;G initiative and we partner with OneTreePlanted to ensure that we return to the Earth what we may take.
 
 
 What does being part of the vForce team look like?
 
 
 An environment of inclusivity, innovation, accountability, and transparency with absolutely no ceiling on how high you fly with us!
 
 
 Learn and Grow
 
 
 At vFairs, we understand the value of achieving your next career goal and while we fully anticipate that you will never want to leave, we also want to be your #1 fan and ambassador when it comes to your dreams; we will act as your career coach as well to set you on the right path.
 
 
 
 About The Role
 
 
 
 We are seeking an experienced Manager, Information Security GRC and Data Protection to lead our efforts in ensuring that our products, processes, and organization adhere to legal, regulatory, and ethical standards.
 
 
 In this role, you will oversee compliance across security, privacy, legal, and data protection, while fostering a culture of transparency and accountability. This position is ideal for someone passionate about information security and data protection compliance in a tech-centric, SaaS environment.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Support and oversee the Information Security Governance, Risk, Compliance, and Privacy operations at vFairs LLC, ensuring alignment with the organization&rsquo;s strategic objectives and regulatory requirements.
 </li>
 <li>
 Contribute to the establishment and management of a formal Information Security GRC and Privacy Program, and support the creation of a roadmap that aligns with industry standards and compliance needs.
 </li>
 <li>
 Assist in maintaining and executing the organization&rsquo;s data privacy initiatives, ensuring compliance with relevant regulations (e.g., GDPR, CCPA) across operations.
 </li>
 <li>
 Work with process and control owners to design and implement information security controls, including the development of policies, procedures, and related documentation.
 </li>
 <li>
 Assist in strengthening the organization&rsquo;s risk management processes by working closely with stakeholders, clients, partners, service providers, and vendors to ensure compliance and security posture.
 </li>
 <li>
 Partner with Legal, HR, and other departments to support an effective privacy program, helping to sustain organizational compliance and ethical standards.
 </li>
 <li>
 Oversee the Third-Party Risk Management program to ensure external partners and vendors meet vFairs&rsquo; security and compliance requirements.
 </li>
 <li>
 Lead risk assessments and support efforts to achieve key certifications and attestations, such as ISO 27001, AICPA SOC 2 Type 2, and others.
 </li>
 <li>
 Assist in managing a security awareness training program, contributing to building a strong security culture within the organization.
 </li>
 <li>
 Collaborate with sales and customer success teams to address security, compliance, and legal concerns, ensuring client satisfaction while maintaining compliance.
 </li>
 <li>
 Provide support in RFP processes related to security and IT aspects, ensuring vFairs can win key contracts by demonstrating its strong compliance and security posture.
 </li>
 <li>
 Ensure that all vFairs customers sign Data Processing Agreements (DPAs) as required, proactively managing these agreements and keeping clients informed of any security updates and SLA compliance.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Minimum 5 years of proven experience in areas of Information Security Governance, Risk Management, Compliance and Privacy.
 </li>
 <li>
 In-depth knowledge of the tech industry&rsquo;s standards and regulations (experience with SaaS products is a big plus)
 </li>
 <li>
 Experience in the implementation of regulatory and compliance frameworks (SOC2, ISO2700x, ITIL, COBIT)
 </li>
 <li>
 Familiarity with Cloud Infrastructure technologies.
 </li>
 <li>
 Understanding of global data protection laws, standards, and associated frameworks (e.g., GDPR, CCPA)
 </li>
 <li>
 Excellent knowledge of reporting procedures and record keeping
 </li>
 <li>
 A business acumen partnered with a dedication to legality
 </li>
 <li>
 An analytical mind able to &ldquo;see&rdquo; the complexities of procedures and regulations
 </li>
 <li>
 BSc/BA in information technology, cybersecurity, project management or related fields.
 </li>
 <li>
 Certifications such as CISSP, CISM, Security+, CIPM, CIPP/E, PMP are desirable.
 </li>
 </ul>
</div>

Manager Information Security (GRC and Data Protection)

imoneyPay

Information Security Program Management:- Lead the development, implementation, and maintenance of Information Security policies,standards, and procedures.- Build and maintain an effective Information Security Management System (ISMS) as perISO 27001 standards.- Conduct regular risk assessments and develop mitigation strategies.Compliance and Audit Readiness:- Drive end-to-end compliance for PCI DSS, ISO 27001, RBI Guidelines for Payment Systems,CERT-In directives, and other applicable standards.- Prepare, coordinate, and manage both internal and external audits, including scoping,evidence collection, auditor coordination, and remediation.- Ensure continuous compliance with data localization and privacy laws (e.g., RBI, DPDPAct).- Monitor and interpret changes in security compliance requirements and implementnecessary updates.Vendor and Third-Party Risk:- Conduct third-party security risk assessments, due diligence, and ongoing monitoring.- Ensure vendors adhere to applicable information security and compliance requirements.Security Operations Support:- Collaborate with DevOps and IT teams to ensure secure infrastructure configurations andvulnerability management.- Participate in incident response planning and execution, including forensics, RCA, andregulatory reporting where needed.contact Info Phone: 8826402491 Mail: hr@imoneypay.inJob Types: Full-time, PermanentPay: &#8377;2,027,019.51 - &#8377;3,090,095.69 per yearBenefits:<ul><li>Health insurance</li><li>Provident Fund</li></ul>Work Location: In person

Information Security Compliance Officer

Search 10000+ Information security manager jobs near you this September. New roles added regularly across leading industries. Apply today.

10000 information security manager jobs NEAR_ME

Information Security Manager

Information Security Snr Manager

Information Systems Security Manager (ISSM)

Information System Security Manager III

Information System Security Manager III

Manager Information Security (GRC and Data Protection)

Information Security Compliance Officer