Head of information security

• Lead the organisation’s cybersecurity program and ensure alignment between security strategy and business objectives
• Design and implement security policies, procedures, and technical solutions aligned with industry frameworks and best practices
• Own the ISO 27001 implementation, compliance, and continuous improvement process
• Manage and operate the organisation’s SIEM platform (Wazuh) and conduct regular security audits across systems, networks, and authentication environments
• Oversee vulnerability management, patching processes, and security scanning using tools such as OpenVAS or Nessus
• Act as the primary liaison for third-party security audits and compliance activities
• Provide security briefings and technical discussions with enterprise customers and partners
• Support security integration for cloud and infrastructure solutions
• Provide strategic guidance on cybersecurity governance, policies, and regulatory requirements
• Contribute to business continuity and disaster recovery planning to ensure organisational resilience
• Monitor and report on the organisation’s risk posture, security initiatives, and incident trends
• Lead and coordinate incident response processes across internal teams
• Ensure robust vendor risk management processes are applied across the organisation

• Minimum 10 years of experience in information security, IT security, or security management roles
• Strong knowledge of security frameworks such as ISO 27001, NIST, and industry best practices
• Hands-on experience securing Linux-based environments
• Experience with threat detection, vulnerability management, and incident response
• Strong understanding of firewalls, IDS/IPS, endpoint security, and security monitoring tools
• Proven ability to design, implement, and enforce organisational security policies
• Strong communication skills with the ability to translate technical security concepts to business stakeholders
• Experience delivering security awareness training and stakeholder engagement

• Exposure to DevSecOps environments, CI/CD pipelines, Terraform, or Kubernetes
• Experience working with Next-Generation Firewalls (e.g., Palo Alto)
• Experience in cloud, infrastructure, or high-performance computing environments

attractive package