Manager - IT and Compliance
About the role
The Manager – IT and Compliance will lead the organization's IT operations, information security, and compliance functions. The role involves developing IT strategies, ensuring the reliability and security of IT infrastructure, maintaining regulatory and information security compliance, and driving continuous improvements across IT services and governance. Key responsibilities include overseeing IT infrastructure, managing IT budgets and vendor relationships, implementing and maintaining ISO 27001 ISMS, ensuring compliance with data protection laws and cybersecurity requirements, conducting risk assessments and audits, and leading the IT and Compliance team. The ideal candidate should have a relevant bachelor's degree, significant experience in IT management and compliance, and strong knowledge of IT governance and security frameworks.
Must have
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.
- A minimum of 7–8 years of relevant professional experience in IT management, information security, or compliance, with at least 2–3 years in a managerial or leadership capacity preferred.
- Strong knowledge of ISO 27001, IT governance, ITIL, information security risk management, and applicable data protection and cybersecurity regulations.
- Hands-on knowledge of IT infrastructure, networks, servers, and cloud technologies, particularly Microsoft 365, Azure, Microsoft Intune, and Active Directory.
- Experience in implementing cybersecurity controls, vulnerability management, threat monitoring, endpoint protection, and security incident response.
- Proven experience in managing ISMS audits, regulatory compliance assessments, ISO certification processes, and Business Continuity and Disaster Recovery Planning.
- Strong leadership, project management, analytical, communication, and stakeholder management skills, with the ability to work effectively with senior management, auditors, vendors, and cross-functional teams.
Nice to have
- Relevant professional certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISA, CISSP, ITIL, or equivalent would be an added advantage.
Technologies
- Active Directory
- Azure
- CISSP
- Cybersecurity
- Intune
- ISO 27001
- ITIL
- Microsoft 365
- PCI DSS
Also posted as
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka