Ot/It Security Manager

INGEPSY; Girardot; Presencial; COP 90.000.000 - 130.000.000; Jornada completa

Descripción de la vacante

INGEPSY is seeking an IT Technical Coordination lead in Colombia to define and maintain the cybersecurity controls roadmap aligned with NIST CSF 2.0, addressing maturity gaps and coordinating MSS teams. This role oversees incident and vulnerability management, ensuring controls are effective and continuously improved.

You will supervise MSS tool administration, review deliverables for quality, and present the IT controls status to the client with independent technical judgment, without

Responsabilidades

• Define and maintain the IT cybersecurity controls roadmap aligned with NIST CSF 2.0 and maturity model gaps
• Functionally lead the client's cybersecurity professionals (incident/vulnerability management and platforms), acting as the provider's technical reference in their day-to-day work
• Coordinate and technically supervise the MSS tool administration team
• Review the technical quality of MSS team deliverables, ensuring controls are effective — not merely operationally active
• Lead IT vulnerability management: prioritization, remediation plans, and closure tracking
• Drive continuous improvement of controls: identify coverage gaps, propose configuration adjustments and new capabilities
• Present the IT controls technical status directly to the client with independent technical judgment, without intermediaries
• NIST CSF 1.x / 2.0
• MSS / MSSP Management
• Executive Reporting

Descripción del empleo

Key Responsibilities — IT Technical Coordination

Define and maintain the IT cybersecurity controls roadmap, aligned with NIST CSF 2.0 and maturity model gaps

Functionally lead the client's cybersecurity professionals (incident/vulnerability management and platforms), acting as the provider's technical reference in their day-to-day work

Coordinate and technically supervise the managed services (MSS) tool administration team

Review the technical quality of MSS team deliverables, ensuring controls are effective — not merely operationally active

Lead IT vulnerability management: prioritization, remediation plans, and closure tracking

Drive continuous improvement of controls: identify coverage gaps, propose configuration adjustments and new capabilities

Present the IT controls technical status directly to the client with independent technical judgment, without intermediaries

• NIST CSF 1.x / 2.0
• MSS / MSSP Management
• Executive Reporting