Manager - Information Security

Bcd-e53600d2; Puerto Bogotá; On-site; COP 200,000,000 - 320,000,000; Full time

Benefits offered by this job

Professional certification support

Global security program exposure

Job summary

Bcd-e53600d2 in Colombia is seeking an experienced Information Security Manager to lead and execute the information security strategy for Colombia, ensuring the protection of information assets, effective cyber risk management, regulatory compliance, and alignment with global security standards.

This role combines strategic leadership with hands-on cybersecurity expertise, serving as the primary security advisor for local leadership while actively supporting security operations, risk management,

Qualifications

• Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in Information Security or Cybersecurity.
• 3+ years of experience leading security programs, initiatives, or teams.
• Experience in cyber risk management, compliance, audits, and security governance.
• Experience coordinating or supporting security incident investigations.
• Strong understanding of information security frameworks such as ISO 27001, NIST, CIS Controls, or COBIT.
• Advanced English proficiency (written and verbal).

Responsibilities

• Lead the local Information Security program aligned with regional and global objectives.
• Serve as the primary point of contact for cybersecurity matters within the country.
• Advise local leadership and executive stakeholders on security risks and mitigation strategies.
• Adapt global security initiatives to local business, operational, and regulatory requirements.
• Identify, assess, and manage information security and cybersecurity risks.
• Maintain and monitor the local risk register and remediation plans.
• Support security reviews for new technologies, business initiatives, and third-party services.
• Coordinate internal and external audits and ensure timely closure of findings and corrective actions.
• Ensure compliance with corporate policies, industry standards, and applicable regulations.
• Lead local coordination of information security incidents.
• Conduct initial incident investigations and collaborate with regional and global security teams.
• Monitor security alerts, vulnerabilities, and emerging threats.
• Support vulnerability management and remediation efforts.
• Facilitate incident response exercises and security testing activities.
• Develop and deliver security awareness and training programs.
• Promote a strong security culture across the organization.
• Assess and monitor security risks associated with vendors and business partners.
• Participate in security due diligence and third-party risk assessments.

Skills

Strategic planning

Stakeholder management

Executive communication

Cyber risk management

English proficiency

Education

Bachelor's degree in Computer Science / IT

Tools

ISO 27001

NIST

CIS Controls

COBIT

Job description

Search by Keyword or Location. When searching on location, enter the country’s full name in English, e.g. United Kingdom or Germany.

Select how often (in days) to receive an alert:

Location: CO, BOGOTA, Office, Colombia, LATAM

We are seeking an experiencedInformation Security Manager to lead and execute the Information Security strategy for Colombia, ensuring the protection of information assets, effective cyber risk management, regulatory compliance, and alignment with global security standards.

This role combines strategic leadership with hands-on cybersecurity expertise, serving as the primary security advisor for local leadership while actively supporting security operations, risk management, incident response, and compliance initiatives.

Key Responsibilities

Security Strategy & Governance

• Lead the local Information Security program aligned with regional and global objectives.
• Serve as the primary point of contact for cybersecurity matters within the country.
• Advise local leadership and executive stakeholders on security risks and mitigation strategies.
• Adapt global security initiatives to local business, operational, and regulatory requirements.
• Identify, assess, and manage information security and cybersecurity risks.
• Maintain and monitor the local risk register and remediation plans.
• Support security reviews for new technologies, business initiatives, and third-party services.
• Coordinate internal and external audits and ensure timely closure of findings and corrective actions.
• Ensure compliance with corporate policies, industry standards, and applicable regulations.

Incident Response & Security Operations

• Lead local coordination of information security incidents.
• Conduct initial incident investigations and collaborate with regional and global security teams.
• Monitor security alerts, vulnerabilities, and emerging threats.
• Support vulnerability management and remediation efforts.
• Facilitate incident response exercises and security testing activities.

Security Awareness & Third-Party Risk

• Develop and deliver security awareness and training programs.
• Promote a strong security culture across the organization.
• Assess and monitor security risks associated with vendors and business partners.
• Participate in security due diligence and third-party risk assessments.

Required Qualifications

• Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in Information Security or Cybersecurity.
• 3+ years of experience leading security programs, initiatives, or teams.
• Experience in cyber risk management, compliance, audits, and security governance.
• Experience coordinating or supporting security incident investigations.
• Strong understanding of information security frameworks such as ISO 27001, NIST, CIS Controls, or COBIT.
• Advanced English proficiency (written and verbal).

Preferred Qualifications

• Master's degree in Information Security, Risk Management, Business Administration, or a related discipline.
• Professional certifications such as:
  • CISSP
  • CISM
  • CISA
  • CRISC
  • ISO 27001 Lead Auditor or Lead Implementer
  • Security+
  • Microsoft Security Certifications

Technical Knowledge

Experience in one or more of the following areas:

• Identity & Access Management (IAM)
• Multi-Factor Authentication (MFA) and Conditional Access
• Security Information and Event Management (SIEM)
• Vulnerability Management
• Network Security
• Third-Party Risk Management

What Success Looks Like

• Strong ability to balance strategic planning with operational execution.
• Excellent stakeholder management and executive communication skills.
• Capability to translate technical risks into business decisions.
• Proven experience working across global and multicultural environments.
• Demonstrated leadership in driving security maturity and risk reduction initiatives.