Senior Manager, Information Security & Data Risk

About the role

The Senior Manager, Information Security & Data Risk leads advisory engagements that protect client data throughout its lifecycle. You will translate regulatory and organisational requirements into practical security and privacy controls while guiding clients on risk‑based decision making.

Key responsibilities

• Lead information‑security, data‑risk, privacy, classification and resilience workstreams for client engagements.
• Assess security governance, policies, control design, threat exposure, access practices and operational evidence.
• Translate legal, regulatory and client requirements into clear security and privacy controls for data initiatives.
• Design or review classification, handling, access‑control, encryption, logging, retention and secure‑disposal mechanisms.
• Advise architecture and engineering teams on security‑by‑design requirements for platforms, APIs, pipelines and analytics solutions.
• Develop risk registers, control matrices, remediation plans and evidence requirements.
• Facilitate risk workshops, present options and recommendations to authorised decision‑makers.
• Review identity and access management, privileged access, segregation of duties and joiner‑mover‑leaver processes.
• Assess incident‑response, backup, disaster‑recovery and business‑continuity arrangements affecting client data.
• Quality‑assure security assessments, designs, test evidence and executive reports produced by delivery teams.

Required profile

• Bachelor’s degree in cybersecurity, information security, computer science or a related field (Master’s preferred).
• Typically 10+ years of experience in information security or technology risk, including 4+ years in a leadership role.
• Proven experience leading security, cyber‑risk, privacy or technology‑risk engagements for senior stakeholders.
• Strong consulting background with the ability to communicate technical risk clearly.

Required skills

• Encryption
• Access Control
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Disaster Recovery
• Business Continuity
• Security Architecture
• Data Classification
• Data Privacy