information systems security manager

Arpatech

Job Title: Information Security ManagerLocation: Karachi (on-site)Shift: 9 AM to 6 PMWe&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities:-Lead and manage enterprise-wide information security initiatives.-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.-Act as a key liaison during security audits and assessments.-Promote awareness and training to build a strong internal security culture.--Strong understanding of SDLC.Requirements:-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.-Proven track record in security compliance, governance, and risk management.-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.-Industry certifications such as CISSP, CISM, or CISA are a strong plus.Job Type: Full-timeWork Location: In person

Information Security Manager

Rolls Royce

Job Description Job Title: Contractor Program Security Officer (CPSO) Working Pattern: Fulltime - onsite (WFH every other Friday) Working location: Indianapolis, IN Rolls-Royce is in search of a multi-faceted security professional in support of multiple USG Defense programs. As the Contractor Program Security Officer (CPSO), you will act as the primary accountable person for our sensitive programs; however, you will work within a core team of CPSOs. Our other CPSO and Assistant CPSO will accompany you in attending meetings, routine engagements with the Program Management Office and more. Why Rolls-Royce? Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount. We are proud to be a force for progress, powering, protecting and connecting people everywhere. We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey. Rolls-Royce has been recognized as the top employer in the Engineering & Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive. At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference. Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics. What you will be doing: With this attractive opportunity you will be the gatekeeper for access, and the enforcer as it pertains to policies, compliance, and maintenance of program under our purview. The candidate will ultimately report to the Facility Security Officer (FSO). Key Responsibilities: <ul><li>Assist the Facility Security Officer (FSO): Specifically in the enforcement of policies and procedures to ensure that national security, sensitive information, intellectual property, and company personnel & assets are safeguarded in accordance with: DoD Manual 5205.07; 32 CFR Part 117 (NISPOM); ICD 705; and any other relevant guidance manuals or Security Directives. </li><li>Supports the Information Systems Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) as it pertains to accountable items such as media and transfers, through document control measures. </li><li>Prepare and review administrative documentation, program access request forms, visitor control, and resolve program-related security issues. </li><li>Administer indoctrinations, program specific training, and debriefs. </li><li>Conduct investigations, security reviews, annual security trainings. </li><li>Complete annual self-inspections. </li><li>Oversees physical security requirements to ICD-705 standards; as well as provide input/oversight to any facility maintenance and upgrades. </li><li>Reviews all contractual requirements in DD Form 254s to extract security obligations; ensuring leadership remains cognizant of security-related concerns, in regard to new and existing programs. </li><li>Develop, implement, and enforce security plans, Standard Operating Procedures (SOPs), and policies specific to each program. </li></ul> Who we're looking for: At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles Basic Requirements: <ul><li>Must have or be able to obtain a US DoD Top Secret Security Clearance. Must be US Citizen. </li><li>Bachelor's degree with 5+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>A Master s degree with 3+ years of corporate security, government security, regulatory compliance, and /or risk management experience. OR; </li><li>A JD/PhD with 0 years experience OR; </li><li>In lieu of degree, 9+ years of corporate security, government security, regulatory compliance, and /or risk management experience. </li><li>Experience with security systems such as DISS, JADE, CORE and Savannah. </li><li>Excellent organizational and project management skills. </li><li>Strong communication and interpersonal skills. </li></ul> Preferred Requirements: <ul><li>Prior security program management experience. </li><li>Extensive SAP / industrial security experience </li><li>Experience working on multiple projects simultaneously with critical deadlines. </li><li>Extensive experience in security education (in-brief/out-brief), and training newly accessed personnel across a diverse work environment. </li></ul> What we offer: We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts. Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location. It's a locally managed and flexed informal discretionary arrangement. As a minimum we're all expected to attend the workplace for collaboration and other specific reasons, on average three days per week. Job Category Security and Resilience Job Posting Date 22 Oct 2025; 00:10 Pay Range $99,987 -$162,479-Annually Location: Indianapolis, IN Benefits Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death & dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements. PandoLogic. Category:Technology,

Contractor Program Security Officer (CPSO)

OISSG Consultancy

An ISMS (Information Security Management System) Consultant develops, implements, and manages security frameworks (like ISO 27001) for organizations, focusing on risk assessment, policy creation, compliance, and security awareness to protect information assets. Key duties include gap analysis, running internal audits, creating documentation, training staff, managing security incidents, and ensuring continuous improvement for certifications and regulatory adherence. Key Responsibilities:<ul><li>Framework Implementation: Design and implement ISMS based on standards like ISO 27001 and ISO 22301 (Business Continuity).</li><li>Risk Management: Conduct risk assessments, identify vulnerabilities, and implement mitigation controls.</li><li>Policy &amp; Documentation: Develop, review, and maintain security policies, procedures, and guidelines.</li><li>Auditing &amp; Compliance: Perform internal audits, manage external certification audits, and ensure adherence to standards.</li><li>Awareness &amp; Training: Create and deliver security awareness programs for employees.</li><li>Reporting: Generate security reports (patching, incidents, compliance) for management.</li><li>Stakeholder Management: Coordinate with IT, management, and external auditors.</li></ul>Essential Skills &amp; Qualifications:<ul><li>Strong knowledge of ISO 27001, risk management, and security frameworks.</li><li>Experience with GRC (Governance, Risk, &amp; Compliance) tools.</li><li>Excellent communication, presentation, and project management skills.</li><li>Relevant certifications (CISA, CISM, CISSP, ISO 27001 Lead Implementer/Auditor) are often required.</li><li>Locally available ( if possible )</li><li>Immediate joiner ( if possible )</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Age:</li><li>Total Number of ISO27001 projects Implemented :</li><li>Total number of ISO 27001 projects led as the main lead implementer :</li><li>Total number of ISO 27001 projects where you worked in a supporting role (not the main lead):</li><li>Joining Period after offer is provided:</li><li>Years of experience in ISMS :</li><li>Current Salary (QAR):</li><li>Expected Salary (QAR):</li></ul>

ISMS (Information Security Management System) Consultant

NTT DATA

<div>Make an impact with NTT DATA 
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.<div>
Your day at NTT DATA 
The Associate Managed Services Information Security Analyst is an entry level subject matter expert, responsible for monitoring, analyzing, interpreting and reporting on the incoming client data for the purpose of delivering security information and recommendations to the clients, enabling the organization to deliver the contracted security services. 
 
This role includes performing tasks such as security incident detection and response, security event reporting, threat hunting, content maintenance (tuning) and interacting with clients to ensure their understanding of the information generated, recommending client system changes as well as answering security related queries from the clients. 
 
This is an entry level role within the Managed Services Information Security Analyst team and works under guidance of more experienced analysts within the team.</div><div> 
Key responsibilities:<ul><li>
Works as part of a global Cyber Defense Centre (CDC) team that works 24/7 on rotational shifts.</li><li>
Works with client stakeholders and relevant internal teams to tune the MSSP platform and client SIEM to enable more efficient detection, analysis and reporting.</li><li>
Under guidance, generates continuous improvement ideas for supported security tools/technologies, to enable improvements to the company services, employee experience and client experience.</li><li>
Adheres to SOPs, customer Run Books and standard processes to ensure a globally consistent delivery whilst also proposing changes and improvements to these standards.</li><li>
Utilizes and document best practices and amend existing documentation as required.</li><li>
Support with security incident handling and response from several vectors including End Point Protection and Enterprise Detection and response tools, attack analysis, malware analysis, network forensics, computer forensics.</li><li>
Learns and utilizes a broad range of skills in LAN technologies, Windows and Linux O/S&rsquo;s, and general security infrastructure.</li><li>
Ensures usage of knowledge articles in incident diagnosis and resolution.</li><li>
Under guidance, perform defined tasks to inform and monitor service delivery against service level agreements and maintain records of relevant information.</li><li>
Cooperates closely with colleagues to share knowledge and build a cohesive and effective team environment, benefiting the individual, the business and the client.</li><li>
Performs any other related task as required.</li></ul></div><div> 
To thrive in this role, you need to have:<ul><li>
Knowledge on implementation and monitoring of a company supported SIEM or security tools/technologies/concepts.</li><li>
Knowledge on security architecture, worked across different security technologies.</li><li>
Knowledge and understanding of the operation of modern computer systems and networks and how they can be compromised.</li><li>
Displays excellent customer service orientation and pro-active thinking.</li><li>
Displays problem solving abilities and is highly driven and self-organized.</li><li>
Good attention to detail.</li><li>
Displays analytical and logical thinking.</li><li>
Well spoken and written communication abilities.</li><li>
Ability to remain calm in pressurized situations.</li><li>
Ability to keep current on emerging trends and new technologies in area of specialization.</li></ul></div><div> 
Academic qualifications and certifications:<ul><li>
Bachelor's degree or relevant qualification in Information Technology or Computing or a related field.</li><li>
Security certifications such as (but not limited to) AZ-500, SC-200, Security+, CEH, CISSP, CISM or similar Certification in different networking technologies such as CCNA, JNCIA, ACCA, PCNSA, CCSA is advantageous.</li></ul></div><div> 
Required experience:<ul><li>
Entry level experience in SOC Analysis Operations.</li><li>
Entry level experience in SIEM usage for investigations.</li><li>
Entry level experience in Security technologies such as (but not limited to) Firewall, IPS, IDS, Proxy.</li><li>
Entry level experience in dealing with technical support to clients.</li><li>
Entry level experience in handling security incidents end to end.</li><li>
Entry level experience in configuring/managing security controls, such as SIEM, Firewall, IDS/IPS, EDR, NDR, UTM, Proxy, SOAR, Honeypots and other security tools.</li><li>
Entry level experience in Security Analysis or Engineering preferably gained within a global services organization.</li></ul></div>
Workplace type:
Hybrid Working
About NTT DATA 
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.
Equal Opportunity Employer 
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.</div>

Associate Managed Services Information Security Analyst

Etisalat

<div><div>Information Security Senior Analyst.Enterprise Security - (240001AD)</div><div>
Description<div></div> 
Job Purpose
Responsible for developing and implementing Etisalat's information security program and security strategy to protect Etisalat&rsquo;s information assets and minimize risk
Report To Position Name
&bull; Support the Senior Team Leader Information Security/ Manager in implementing and developing the Information Security Program.&bull; Research and assist in the evaluation of products and technologies to protect Etisalat&rsquo;s Information Security assets and capable of evaluating products/technologies independently.&bull; Keep abreast of the latest threats and practices to address security exposures and threats and propose solutions.&bull; Perform penetration testing and auditing activities under the supervision of the Senior Team Leader Information Security/ Manager.&bull; Assist in the development and implementation of the information security awareness program.&bull; Lead incident handling, response and investigation activities.&bull; Perform application security related activities including integrating security throughout the application development lifecycle.&bull; Develop and review information security policies, standards, and guidelines under the supervision of the Senior Team Leader Information Security/ Manager.&bull; Perform other information security related duties as assigned (capable of working with minimal guidance and support).<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS_ESSENTIAL
&bull; University Degree in BSC in Communication Engineering or Computer Engineering&bull; Previous experience should be in one of the following areas: Network Security, Application Development, Information Security, System Administration&bull; Very Good Computer skills&bull; Fast learner and reader with the ability to understand diverse technologies&bull; Very Good in Arabic &amp; English (Reading, Writing &amp; Oral). 
QUALIFICATIONS_DESIRABLE
Good knowledge of system administration, web application development, and auditing. 
EXPERIENCE_ESSENTIAL
Minimum 4 years experience (with at least 18 months of information security experience) 
EXPERIENCE_DESIRABLE
N/A 
CERTIFICATIONS_ESSENTIAL
&bull; Certified Information Systems Security Professional (CISSP).&bull; Certified Information Systems Auditor (CISA).&bull; ISO 27001 Lead Auditor.&bull; Penetration testing certifications.<div> 
</div></div><div>
Job: Senior Analyst</div><div>
Organization: Etisalat-Misr</div><div>
 Non-Management</div><div>
Job Posting: 28/Dec/2025, 5:05:51 AM</div></div>

Information Security Senior Analyst.Enterprise Security

Al Adyat consultancy

We are seeking a skilled and experienced Cloud Security Architect to lead our security architecture in our cloud environment.This role involves designing, developing, and managing robust cloud security solutions, implementing cloud security controls, and ensuring compliance with security protocols and procedures.The ideal candidate will have strong knowledge of cloud computing and security frameworks, with demonstrated experience with various cloud platforms such as AWS, Azure, and Google Cloud.Responsibilities<ul><li>Design and develop a comprehensive cloud security architecture.</li><li>Ensure that cloud-based systems are designed and implemented to high security standards.</li><li>Create and maintain security protocols and procedures.</li><li>Perform regular security assessments and audits.</li><li>Develop strategies to handle security incidents and coordinate responses to security breaches.</li><li>Stay up-to-date with the latest security systems, standards, authentication protocols, and products.</li><li>Train staff on cloud security risks and preventive measures.</li><li>Collaborate with IT operations and software development teams to ensure secure design and development of applications and systems.</li></ul>Qualifications<ul><li>Proven experience as a Cloud Security Architect or similar role in information security.</li><li>Proficiency in cloud platforms such as AWS, Azure, Google Cloud, etc.</li><li>Strong knowledge of cloud security frameworks and best practices.</li><li>Experience with security technologies including Firewalls, DLP, Network Intrusion Detection, and Secure Coding Practices.</li><li>Understanding of network and web related protocols.</li><li>BSc/MSc degree in Computer Science, Cybersecurity or a related field.</li><li>Professional security management certification, such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).</li></ul>Cloud Security Architect Qualifications and SkillsA proficient Cloud Security Architect should possess a blend of technical knowledge, soft skills, and industry-specific expertise, such as:<ul><li>Expertise in cloud security architecture and strategy, with comprehensive knowledge of cloud computing and service delivery concepts.</li><li>Hands-on experience in designing and implementing security solutions that align with business needs, regulatory requirements, and risk tolerance levels.</li><li>Strong analytical skills to evaluate complex cloud environments, identify security threats, and develop innovative solutions.</li><li>Exceptional communication skills to articulate security principles, guidelines, and best practices to stakeholders at all levels.</li><li>Ability to collaborate effectively with IT, business, and cybersecurity teams to ensure the seamless integration of security controls.</li><li>Understanding of cloud service models (IaaS, PaaS, SaaS), cloud deployment models (Public, Private, Hybrid), and key cloud providers (AWS, Azure, Google Cloud).</li><li>Experience with cloud security technologies, encryption algorithms, secure coding practices, and incident response procedures.</li><li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), or Certified Information Security Manager (CISM).</li></ul>Cloud Security Architect Experience RequirementsCloud Security Architects usually start with a bachelor&rsquo;s degree in computer science, information technology, cybersecurity or a related field, and they often hold industry-specific certifications.They must have significant practical experience, typically around 5 to 10 years in IT security roles.Entry-level Cloud Security Architects may have spent a few years in roles such as Security Analyst, Network Engineer, or Systems Administrator.They are likely to have hands-on experience in cloud environments, dealing with security threats and managing security protocols.Mid-level Cloud Security Architects are typically required to have a minimum of 5 years of experience with security protocols and systems.They are expected to have advanced technical skills, understanding of cloud-based applications, and knowledge of emerging security threats.Senior Cloud Security Architects should have over 10 years of experience in the field, with a solid background in designing, implementing, and managing secure cloud infrastructures.Additionally, they should have leadership experience, as they are often responsible for leading teams and making strategic decisions about cloud security policies and procedures.All levels of Cloud Security Architects are expected to keep up-to-date with the latest security systems, threats, and mitigation strategies.They should also have experience with specific cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), or Microsoft Azure.Job Type: Full-timePay: QAR40,000.00 - QAR55,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Cloud Security Architect : 5 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science, information technology (Required)</li></ul>

Cloud Security Architect

Job Title: Information Security Manager Location: Karachi (on-site) Shift: 9 AM to 6 PM We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies. Key Responsibilities: -Lead and manage enterprise-wide information security initiatives. -Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred). -Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps). -Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices. -Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks. -Act as a key liaison during security audits and assessments. -Promote awareness and training to build a strong internal security culture. -Strong understanding of SDLC. Requirements: -Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus). -Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role. -Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies. -Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices. -Proven track record in security compliance, governance, and risk management. -Experience working with or managing Wazuh or similar SIEM platforms is highly desirable. -Industry certifications such as CISSP, CISM, or CISA are a strong plus. Strong understanding of SDLC. Job Type: Full-timeWork Location: In personJob Type: Full-timeWork Location: In person

Information Security Manager/ Pre-sales Manager Information Security

Search 10000+ Information systems security manager jobs near you this January. New roles added regularly across leading industries. Apply today.