Information Security and Business Continuity Manager

JOB PURPOSE

Responsible for leading the development, implementation, and continuous improvement of RAKEZ’s Information Security Management System (ISMS) and Business Continuity Management (BCM) framework. The role is accountable for safeguarding the confidentiality, integrity, and availability of organizational information assets through effective governance, cyber risk management, security operations, compliance monitoring, data protection, business continuity planning, and incident response. The position supports organizational resilience, regulatory compliance, and secure digital transformation initiatives while fostering a strong security‑aware culture across the organization.

• Develop, implement, and continuously improve the Information Security Management System (ISMS) and Business Continuity Management (BCM) framework in accordance with applicable standards, regulations, and best practices.
• Lead the development and execution of the organization’s Information Security Strategy, ensuring alignment with business objectives, risk appetite, and digital transformation initiatives.
• Establish and maintain cybersecurity governance, risk, and compliance programs, including enterprise cyber risk assessments, risk treatment plans, security policies, standards, and procedures.
• Conduct and oversee security audits, compliance assessments, regulatory reviews, and certification activities to ensure continued compliance with ISO 27001, ISO 22301, and other applicable frameworks.
• Manage security operations, including vulnerability management, threat monitoring, incident response, identity and access management, privileged account management, and data loss prevention initiatives.
• Lead the investigation and management of cybersecurity incidents, ensuring timely containment, remediation, root cause analysis, and implementation of corrective actions.
• Oversee data classification, data protection, privacy controls, and information security requirements across business systems, applications, and cloud environments.
• Manage third‑party and vendor security risk assessments to ensure compliance with RAKEZ information security requirements and standards.
• Develop, maintain, and test business continuity and disaster recovery plans, including Business Impact Analysis (BIA), crisis management plans, recovery strategies, and emergency response exercises.
• Support secure adoption of emerging technologies by establishing governance and risk management controls covering cloud services, application security, Dev Sec Ops  practices, and Artificial Intelligence (AI) solutions.
• Design and deliver information security awareness, phishing simulation, and security culture initiatives to improve employee awareness and reduce cyber risk.
• Prepare and present security, risk, compliance, and business continuity reports, dashboards, and recommendations to senior management and relevant governance committees.
• Manage relationships with auditors, regulators, technology partners, vendors, and other stakeholders relating to information security and business continuity matters.

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field. Master's degree preferred.
• 8-10 years of progressive experience in Information Security, Cybersecurity, Risk Management, Governance, or Business Continuity, including at least 3-5 years in a leadership role.
• Hands‑on experience with enterprise security technologies, cloud security, data protection, incident management, and risk management frameworks.
• Strong knowledge of ISO 27001, ISO 22301, cybersecurity governance, regulatory compliance, and business continuity management.

• CISSP / CISM
• CRISC
• ISO 27001 Lead Auditor or Lead Implementer
• ISO 22301 Lead Auditor or Lead Implementer
• CBCP / MBCI
• Cloud Security Certifications (Azure, AWS, GCP) preferred.