Information Security Manager

This role is responsible for shaping the local information security strategies, overseeing the local ISMS, and leading cybersecurity efforts. The Information Security Manager is responsible for shaping the local information security strategies, overseeing the local ISMS, and leading cybersecurity efforts in a specific business area, including incident response, employee training, and liaising with external authorities.

The ideal candidate will support the implementation of group-wide strategies, policies, and guidelines while ensuring they are effectively tailored and developed to meet the specific needs of the organisation. They will play a key role in aligning local policies with overarching business objectives, promoting consistency and best practices across the organisation.

• Establish, operate, and continuously improve the Information Security Management System in the responsible area.
• Regularly review compliance with laws and regulations as well as security policies and requirements (internal/external) and manage the information security risk register including communication of risks to VP Information Security and local risk management.
• Provide status updates to VP InfSec and stakeholders in the area of responsibility to support risk-informed decision-making.
• Implement awareness programs and training on information security topics.
• Offer guidance on security requirements for projects and support their implementation.

The ideal candidate will have experience in information security management, including the development of policies to safeguard the organisation’s digital assets. They will also possess a strong understanding of risk management principles, with hands-on experience in maintaining risk registers and implementing effective risk mitigation procedures to protect business operations.

• 5 years job experience in Information security.
• Experience in conducting supplier security assessments, audits, and advising on security requirements for projects.
• Skilled in developing and implementing employee awareness and training programs on information security topics.
• Relevant professional certifications (e.g., CISSP, CISM, CISA).
• University degree in Information Technology, Cybersecurity, or a related field, with significant professional experience.

We’re committed to creating an inclusive environment that embraces diversity and fosters the development of knowledge, skills, and experience. Whatever your role, you’ll find an open, welcoming atmosphere that empowers you, and recognises your contribution. In return we offer a competitive starting salary supported by a comprehensive range of financial, lifestyle and wellness benefits with the flexibility to follow a hybrid working model.

• Bonus earning potential.
• Non-contributory pension with 10% employer contribution.
• 25 days holiday plus bank holidays and volunteering days.
• Buy / sell holidays.
• Life assurance.
• Medical and dental insurance (family cover).
• Range of optional flexible benefits.

We are committed to supporting your career growth with opportunities to develop both your knowledge and experience through a blended approach to learning. Join SEFE and help us secure energy supply across Europe and shape a better, more sustainable tomorrow.