[Hiring] Information Security Manager @Ciklum

Role Description

Ciklum is looking for an Information Security Manager to join our team full-time in Bulgaria. As an Information Security Manager, you will:

• Promote a security-first culture at the project.
• Contribute to the delivery of an information security strategy to address evolving business risks.
• Lead collaboration with stakeholders to communicate and embed secure ways of working.
• Protect the client's brand and its customers.
• Detect and respond to incidents.
• Strengthen defenses and reduce the attack surface.
• Proactively highlight risks to the business and promote security awareness.
• Drive adoption of and adherence to security policies, standards, and controls.
• Protect critical assets and ensure appropriate assurance and rigorous testing.
• Manage local security incidents effectively and remediate audit findings.
• Ensure effective security operations (e.g., vulnerability scanning, patching).
• Manage risk in a pragmatic and cost-effective manner.
• Report on the overall effectiveness of the security program against defined KPIs.
• Build strong working relationships and influence others to protect our Smile.

Qualifications

• Demonstrable experience of leading an information security capability for a large business unit.
• Good understanding of security within agile development processes and in Amazon Web Services.
• Adept understanding of security operations and security incident management in Cloud and On-Prem environments.
• Good experience in implementing ISMS in a large organization.
• AWS Cloud Fundamental or Practitioner certification preferable.
• ISO27001 Lead Implementer, COMPTIA Security+, CISMP/CISSP/CISM/CISA certified preferred.
• Good understanding of the international regulatory context, particularly data privacy.
• Good understanding of standards and frameworks such as ISO, NIST, PCIDSS, OWASP, and ITIL.
• Excellent planning and organization skills.
• Strong communication skills and experience in gaining commitment from stakeholders.
• Excellent interpersonal and relationship skills.
• Goal-oriented with a focus on Information Security objectives and deliverables.
• Problem-solving skills to identify creative solutions for Information Security GRC activities.
• A logical thinker and team player.
• Strong commercial acumen in decision-making.
• Good organizational structure awareness.
• Ability to understand the needs and objectives of other teams.

Requirements

• Demonstrable experience of leading an information security capability for a large business unit.
• Good understanding of security within agile development processes and in Amazon Web Services.
• Adept understanding of security operations and security incident management in Cloud and On-Prem environments.
• Good experience in implementing ISMS in a large organization.
• AWS Cloud Fundamental or Practitioner certification preferable.
• ISO27001 Lead Implementer, COMPTIA Security+, CISMP/CISSP/CISM/CISA certified preferred.
• Good understanding of the international regulatory context, particularly data privacy.
• Good understanding of standards and frameworks such as ISO, NIST, PCIDSS, OWASP, and ITIL.
• Excellent planning and organization skills.
• Strong communication skills and experience in gaining commitment from stakeholders.
• Excellent interpersonal and relationship skills.
• Goal-oriented with a focus on Information Security objectives and deliverables.
• Problem-solving skills to identify creative solutions for Information Security GRC activities.
• A logical thinker and team player.
• Strong commercial acumen in decision-making.
• Good organizational structure awareness.
• Ability to understand the needs and objectives of other teams.

Benefits

• Regular salary reviews based on performance.
• Corporate events: webinars, offline parties, and meetups.
• Internal Mobility Program.
• Tailored education path (including full access to Udemy, certifications, etc.).
• 25 paid days off: 20 business days of vacation per calendar year + 5 undocumented sick leave days.
• Additional health insurance.
• 100% company-covered Multisport card, with discounts available for family members.