Security Manager

Governance, Risk & Compliance (GRC)

• Lead and manage SWIFT CSP, COSO, and ISO 27001 readiness, audits, and compliance programs.
• Develop, implement, and maintain enterprise security governance frameworks, policies, and standards.
• Conduct internal security audits, risk reviews, and gap assessments.
• Track remediation plans and ensure timely closure of compliance findings.
• Support certification and regulatory audits with proper documentation and evidence.

Enterprise Risk Management

• Perform enterprise-wide risk assessments to identify vulnerabilities and exposures.
• Develop and monitor risk mitigation strategies and remediation plans.
• Ensure alignment between security risk management and business objectives.
• Prepare and present risk reports, dashboards, and security metrics to stakeholders.

Security Operations

• Oversee vulnerability management lifecycle including identification, prioritization, and remediation.
• Collaborate with SOC teams for proactive threat detection and monitoring.
• Ensure implementation of security controls across endpoints, networks, applications, and cloud.
• Monitor enterprise security posture and drive continuous risk reduction.

Security Tools & Technologies

• SIEM: Log analysis, alert tuning, correlation, incident triage.
• DLP: Data protection policies, monitoring, incident handling.
• EDR/XDR: Endpoint detection and response management.
• Firewalls: Policy review, configuration validation, compliance alignment.
• IAM: Identity governance, access control, lifecycle management.

Incident Management & Response

• Develop and maintain Incident Response frameworks and playbooks.
• Lead incident management including containment, eradication, and recovery.
• Conduct Root Cause Analysis (RCA) and post-incident reviews.
• Prepare incident reports for stakeholders and auditors.
• Ensure compliance with regulatory and organizational incident response requirements.

Leadership & Stakeholder Management

• Lead and mentor security analysts, SOC teams, and GRC professionals.
• Collaborate with internal teams, customers, vendors, and auditors.
• Provide executive reporting and clear communication on security posture.
• Drive security awareness and cross-functional collaboration.

Architecture, Governance & Secure Configuration

• Develop and maintain enterprise security policies, standards, and procedures.
• Ensure secure configuration baselines across infrastructure, applications, and cloud.
• Embed security into SDLC with DevOps, IT, and Cloud teams.
• Provide guidance on secure architecture design for new initiatives.