Information Security Manager

About the role

The InfoSec Lead at AVASO is the security conscience of the Enterprise Technology & Enablement function. This player‑coach role owns the security strategy, drives its execution, and builds a security‑first culture across the organisation.

Key responsibilities

• Own and communicate AVASO’s security posture, identify gaps and create a roadmap to close them.
• Define, maintain and enforce security policies, standards and controls enterprise‑wide.
• Drive security architecture decisions aligned with infrastructure and application delivery.
• Lead ISO 27001 and SOC2 compliance programmes from gap assessment through audit coordination.
• Maintain the risk register and track remediation of control gaps.
• Manage SIEM monitoring, vulnerability scanning and remediation tracking.
• Own identity and access management processes, including access reviews and joiner/mover/leaver procedures.
• Lead incident response activities, including containment, escalation and post‑incident review.
• Design and deliver a security awareness programme to foster a security‑conscious culture.
• Support vendor security assessments, client‑facing security audits and provide security input to AI and data initiatives.

Required profile

• Hands‑on security leader with the ability to communicate risk clearly to senior leadership.
• Partner‑oriented mindset, working closely with technology teams to embed security.
• Proven experience building and scaling security programmes in a fast‑growing organisation.

Required skills

• Security architecture and design of enterprise‑wide policies, standards and controls.
• ISO 27001 compliance programme delivery.
• SOC2 compliance programme delivery.
• SIEM monitoring and management.
• Vulnerability management and remediation tracking.
• Identity and access management, including access reviews.
• Incident response leadership.
• Risk register maintenance and control gap remediation.
• Security awareness programme development.