[Hiring] Manager of Information Security @Ehvert Engineering a Salas O'Brien company

Role Description

We are seeking an experienced Manager of Information Security as an independent contract worker to lead and continuously improve the company's information security and compliance program. This is a standalone leadership role responsible for establishing and maintaining security best practices across the organization while ensuring compliance with international standards and regulatory requirements.

• Own security initiatives end-to-end, including ISO 27001 implementation, security risk management, identity and access management, incident response, security awareness programs, and audit readiness.
• Work closely with IT leadership while maintaining independent authority to assess security risks and recommend improvements.
• Collaborate with cross-functional teams to strengthen the organization's security posture while supporting the company's continued international growth.

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of experience in information security roles.
• Proven experience implementing or significantly improving information security and compliance programs.
• Direct experience with ISO 27001 implementation, audit preparation, or certification maintenance.
• Hands-on experience with network, endpoint, cloud, and identity security.
• Experience leading security incident response activities.
• Written and spoken English B2 or higher.
• Experience with Identity and Access Management (IAM) and security governance.
• Familiarity with security technologies such as SIEM, endpoint protection, MFA, and email security solutions.
• Strong understanding of risk assessment methodologies and security best practices.
• Experience working in international environments is considered an asset.
• Professional certifications such as CISSP, CISM, Security+, or equivalent are considered an asset.
• Experience in engineering, professional services, or AEC environments is considered an asset.
• Familiarity with data protection regulations relevant to engineering and design services is an asset.
• Microsoft Office proficiency (Word, Excel, Outlook).
• Ability to prioritize multiple initiatives in a fast-paced environment.
• Strong analytical, organizational, and communication skills.
• Ability to communicate technical concepts effectively to both technical and non-technical stakeholders.

Requirements

• Own and continuously improve the company's information security and compliance program.
• Lead ISO 27001 implementation, certification readiness, and ongoing compliance initiatives.
• Conduct security assessments and risk evaluations across systems, endpoints, cloud environments, and networks.
• Design, implement, and maintain information security policies, procedures, and standards.
• Develop and lead incident response planning and coordinate security incident investigations.
• Manage Identity and Access Management (IAM), including access reviews and least privilege enforcement.
• Evaluate, implement, and maintain security technologies such as endpoint protection, SIEM, MFA, email security, and related tools.
• Conduct employee security awareness training and phishing simulation programs.
• Partner with IT leadership on infrastructure decisions while independently identifying and communicating security risks.
• Maintain audit readiness, compliance documentation, and security governance processes.
• Support ongoing improvement of regulatory compliance initiatives and security controls.

Benefits

• Experience in a high-tech industry completing work for an international company.
• Unique, cutting-edge data center projects.
• Dynamic work partnering with a team of professionals focused on engineering.
• Competitive hourly rate.
• Ability to collaborate remotely.
• Supportive dynamic environment.
• English classes made available.