Information Systems Security Manager Job Description
The Information Systems Security Manager (ISSM) plays a vital role in safeguarding a Canadian organization's information assets and infrastructure. This strategic role is responsible for developing, implementing, and managing the organization's overall information security program.
Typical Information Systems Security Manager Duties:
Develop, implement, and maintain a comprehensive information security program aligned with industry best practices and compliance regulations (e.g., PCI DSS, HIPAA, GDPR).Conduct security risk assessments and identify vulnerabilities within IT systems and data.Design and implement security controls to mitigate risks, including access controls, data encryption, and network security measures.Develop and enforce information security policies and procedures to ensure user compliance.Manage and oversee security incident and event management (SIEM) processes.Lead and manage a team of information security professionals (if applicable).Oversee security awareness and training programs for employees.Collaborate with IT departments, business units, and senior management to ensure information security is integrated into overall business processes.Conduct security audits and penetration testing to identify and address security weaknesses.Monitor and report on the effectiveness of the information security program to stakeholders.
Looking for an information systems security manager or an information systems security manager job?
The candidate is new to the role and building the needed skills, experience and autonomy.
50th percentile
138250
The candidate has the experience to perform core responsibilities without direct supervision and is comfortable with the role’s processes and subject matter.
75th percentile
151750
The candidate delivers value beyond the stated job duties, has advanced qualifications and experience, and is ready for the next career level.
