Global Cybersecurity Manager | ISO 27001 & NIST Lead

CIMMYT - International Maize and Wheat Improvement Center; Mexico; On-site; PHP 4,426,000 - 7,377,000; Full time

Benefits offered by this job

Year-end bonus

Vacation premium

Life and medical insurance

Supermarket coupons

Savings fund

Mexican benefits (IMSS/SAR)

Job summary

CIMMYT is seeking an experienced Cybersecurity Manager to lead the protection of its information assets underpinning its global research operations. The postholder heads CIMMYT's information security function and its ISMS aligned to ISO/IEC 27001:2022, with ownership of security platforms and the team that runs them.

Requirements include a Bachelor’s degree, CISSP/CISM or ISO/IEC 27001 Lead Implementer/Auditor, and +8 years in information security including 3 years in leadership.

Qualifications

• Bachelor’s degree in computer science, IT, or related field.
• Security certification required: CISSP, CISM, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent.
• +8 years of professional experience in information security, including 3 years managing/supervising a tech team.
• Experience implementing ISO/IEC 27001 and producing audit evidence.
• Experience in multi-country or distributed organizations is a plus; non-profit/ international research background is an advantage.
• Foreign nationals must have legal work documents for Mexico.

Responsibilities

• Lead CIMMYT's information security function and coach the cybersecurity team.
• Operate and improve the ISO/IEC 27001:2022 ISMS with documented controls.
• Prepare risk and control items and drive actions.
• Oversee configuration, integration, tuning and troubleshooting across security platforms including SIEM.
• Own vulnerability and patch management, and incident response end-to-end.
• Validate control effectiveness and maintain technical evidence.
• Coordinate security standards with regional IT and conduct security awareness.
• Report monthly on security posture, risk and control performance.

Skills

Cybersecurity leadership

Risk assessment

Incident response

Security architecture

Mentoring & coaching

Education

Bachelor’s degree in Computer Science / Information Technology or related field

Master’s degree (advantage)

Tools

ISO/IEC 27001

NIST CSF

SIEM platforms

Identity & Access Management

Vulnerability management

Job description

CIMMYT is seeking an experienced Cybersecurity Manager to lead the protection of its information assets underpinning its global research operations. The postholder heads CIMMYT's information security function and its ISMS aligned to ISO/IEC 27001:2022, with ownership of security platforms and the team that runs them.

Requirements include a Bachelor’s degree, CISSP/CISM or ISO/IEC 27001 Lead Implementer/Auditor, and +8 years in information security including 3 years in leadership.