Information Security Manager

The World Economic Forum, committed to improving the state of the world, is the International Organization for Public-Private Cooperation. The Forum engages the foremost political, business, and other leaders of society to shape global, regional, and industry agendas.

Our information security infrastructure is critical to the seamless operation of the Forum's activities, enabling our teams to connect, collaborate, and drive impactful initiatives securely. To support this, we are looking for an experienced and proactive Information Security Manager to oversee and enhance our information security framework. The ideal candidate will have a strong technical background, excellent problem-solving skills, and the ability to manage complex security environments. This role is essential in ensuring the reliability, security, and efficiency of our information systems.

The IT Security team is responsible for maintaining and optimizing the Forum's information security posture. This team ensures that our systems and data are robust, secure, and capable of supporting our global operations.

Responsibilities:

Information Security Management:

• Design, implement, and manage the Forum's information security policies and procedures.
• Monitor security performance and troubleshoot issues to ensure optimal operation.
• Develop and enforce security policies and procedures to maintain data security and integrity.

Technical Leadership:

• Serve as a technical resource for security-related questions and issues.
• Guide the IT team on best practices, technical solutions, and potential pitfalls related to information security.
• Evaluate emerging security technologies and propose how they can be leveraged to benefit the Forum.

Stakeholder Collaboration:

• Coordinate with cross-functional teams to ensure security requirements are met for various projects and initiatives.
• Work closely with external vendors and service providers to manage security services and support.
• Solicit feedback from internal teams to inform security enhancements and improvements.

Security & Compliance:

• Implement and manage security measures to protect against cyber threats.
• Ensure compliance with relevant regulations and standards.
• Conduct regular security audits and vulnerability assessments.

Requirements:

• Advanced university degree in Computer Science, Information Technology, or a related field.
• 8+ years of relevant industry experience in information security management.
• Strong analytical thinker with excellent problem-solving skills.
• Proven technical acumen and ability to converse in-depth with engineering teams.
• Extensive experience with security infrastructure, including firewalls, intrusion detection systems, and encryption technologies.
• Familiarity with security monitoring and management tools (e.g., SIEM, IDS/IPS).
• Familiarity with vulnerability management and remediation tools.
• Familiarity with cloud technologies like AWS, GCP and Azure.
• Familiarity with penetration testing frameworks.
• Familiarity with Cloud Security Posture Management.
• Experience with security practices and technologies.
• Experience writing policies and standards.
• Strong Linux skills
• Fluency in English, with excellent written and verbal communication skills.
• Certifications such as CISSP, CISM, or equivalent are a plus.

Why work at the Forum:

The Forum believes that progress happens by bringing together people from all walks of life who have the drive and the influence to improve the state of the world by building awareness and cooperation, shaping mindsets and agendas, and driving collective action. Join us and become a driver for positive change!