Manager – Enterprise Security

Sri Lanka
Fulltime

About Client Partner

Our client partner is a premier diversified conglomerate in Sri Lanka, operating extensive business units across healthcare, consumer goods, mobility, and technology infrastructure. Recognizing information security as a core strategic enabler, the organization maintains a high-performance technology environment. They offer an executive leadership atmosphere for an experienced cybersecurity leader to drive group-wide enterprise resilience.

About the Role

We are seeking an experienced, strategic Manager – Enterprise Security to lead and strengthen the group's enterprise-wide information security management framework. In this key role, you will govern cybersecurity risks, oversee security operations and incident response, direct vulnerability assessments, ensure regulatory and policy compliance, and provide executive security risk reporting to senior management across a multi-cloud enterprise landscape.

Responsibilities

Information Security Governance: Lead, establish, and continuously enhance the group's Information Security Management Framework to safeguard organizational digital assets and technology infrastructure.
Risk Management & Security Operations: Manage comprehensive cyber risk assessments, establish robust incident response protocols, and oversee daily security operations.
Vulnerability Management & Audits: Oversee enterprise vulnerability assessment and penetration testing (VAPT) initiatives, security audits, and continuous threat monitoring routines.
Awareness & Policy Compliance: Drive organization-wide cybersecurity awareness programs and enforce strict compliance with enterprise security policies, procedures, and standards.
Executive Insights & Reporting: Provide strategic security risk insights, metric dashboards, and analytical threat reports to C-level leadership and the board.
Cloud & SDLC Governance: Enforce Secure SDLC standards and manage security posture across IaaS environments on major cloud provider platforms.

Requirements

Educational Qualifications: Bachelor’s Degree in Information Systems, Computer Science, Cybersecurity, Information Technology, Business Administration, Marketing, or Finance / Management Accounting.
Professional Certifications: Recognized security certifications such as CISSP, CISA, or CISM are highly required.
Technical Experience: Hands-on experience with VAPT tools, SIEM platforms, cyber risk management, security auditing, and major cloud IaaS environments (provisioning, monitoring, maintenance, and troubleshooting).
Standards & Frameworks: Strong working knowledge of OWASP, SANS, WASC, and Secure SDLC methodologies.
Core Competencies: Exceptional analytical, investigative, and problem-solving capabilities, with strong communication skills to present security findings to senior leadership.