Manager – IT and Compliance
About the role
The Manager – IT and Compliance is responsible for developing and executing IT strategies, policies, and governance frameworks that align with business objectives. The role oversees IT infrastructure, networks, servers, cloud environments, and enterprise systems to ensure operational efficiency and business continuity. Key responsibilities include managing IT budgets, procurement, vendor relationships, and IT service delivery standards, as well as leading the implementation and continual improvement of the ISO 27001 Information Security Management System (ISMS). The manager ensures compliance with data protection laws and cybersecurity requirements, conducts risk assessments and audits, coordinates external audits, and maintains cybersecurity controls. The position also involves developing business continuity and disaster recovery plans, leading and mentoring team members, and collaborating with senior management and stakeholders. Candidates should have a relevant degree and significant experience in IT management, information security, or compliance, with strong knowledge of ISO 27001, IT governance, and hands-on experience with relevant technologies.
Must have
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
- A minimum of 7–8 years of relevant professional experience in IT management, information security, or compliance, with at least 2–3 years in a managerial or leadership capacity preferred.
- Strong knowledge of ISO 27001, IT governance, ITIL, information security risk management, and applicable data protection and cybersecurity regulations.
- Hands-on knowledge of IT infrastructure, networks, servers, and cloud technologies, particularly Microsoft 365, Azure, Microsoft Intune, and Active Directory.
- Experience in implementing cybersecurity controls, vulnerability management, threat monitoring, endpoint protection, and security incident response.
- Proven experience in managing ISMS audits, regulatory compliance assessments, ISO certification processes, and Business Continuity and Disaster Recovery Planning.
- Relevant professional certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISA, CISSP, ITIL, or equivalent would be an added advantage.
- Strong leadership, project management, analytical, communication, and stakeholder management skills, with the ability to work effectively with senior management, auditors, vendors, and cross-functional teams.
Technologies
- Active Directory
- Azure
- CISSP
- Cybersecurity
- Intune
- ISO 27001
- ITIL
- Microsoft 365
- PCI DSS
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka