Information Security Manager

About the role

The Information Security Manager (InfoSec Lead) will act as the security conscience for AVASO’s Enterprise Technology & Enablement function. This player‑coach position owns the security strategy, drives its execution, and builds a security‑first culture across the organisation.

Key responsibilities

• Define, communicate and continuously improve AVASO’s security posture, identifying gaps and prioritising remediation road‑maps.
• Develop and maintain enterprise‑wide security policies, standards, controls and architecture decisions.
• Lead ISO 27001 and SOC2 compliance programmes from gap assessment through evidence collection and audit coordination.
• Oversee hands‑on security operations including SIEM monitoring, vulnerability scanning, remediation tracking and identity‑access management processes.
• Direct incident response activities, from containment and escalation to post‑incident review.
• Design and deliver a security awareness programme that fosters a security‑conscious culture without hindering daily operations.
• Support vendor security assessments, client‑facing audits and provide security input for AI and data initiatives.

Required profile

• Proven experience leading security strategy and operations in an enterprise environment.
• Strong communication skills to translate technical risk into business language for leadership.
• Ability to work collaboratively with technology towers and act as a security partner rather than a gatekeeper.

Required skills

• Security architecture and policy design
• ISO 27001 compliance implementation
• SOC2 compliance implementation
• SIEM monitoring and management
• Vulnerability management and remediation tracking
• Identity and Access Management (IAM) processes
• Incident response leadership
• Risk register maintenance and control gap remediation