Senior Information Security Manager

Roles & Responsibilities

The Senior Information Security Manager is responsible for leading and managing the organization’s overall information security strategy, operations, and compliance initiatives. This role requires both strategic planning and hands-on execution to ensure the company’s data, systems, and infrastructure are protected against evolving security threats.

What will you do

• Oversee and manage day-to-day information security operations and compliance activities.
• Lead the annual ISO 27001 audit process, ensuring continuous compliance and successful recertification.
• Manage and coordinate the company’s SOC 2 accreditation process, including documentation, control validation, and audit readiness.
• Oversee and execute the annual security accreditation process in China, ensuring alignment with local regulatory requirements and internal standards.
• Develop, implement, and maintain security policies, standards, and procedures.
• Partner with internal teams to assess security risks and ensure secure system design and configuration.
• Drive security awareness and training programs across the organization.
• Conduct regular risk assessments, vulnerability scans, and incident response activities.
• Work closely with IT, engineering, and compliance teams to ensure security is embedded in business processes and products.
• Provide strategic security recommendations to leadership and drive initiatives that strengthen the company’s security posture.
• Balance strategic leadership and hands-on execution, ensuring both tactical issues and long-term improvements are effectively managed.

What do we expect

Tell employers what skills you have

Information Security

Reverse Engineering

Security Operations

XSS

ISO

Cryptography

Risk Management

ISO 27001

Security Strategy

System Design

Information Security Management

Regulatory Requirements

Audit

Security Awareness

CISSP

C++