TH

Manager – Enterprise Security

Therighttalentlinkedin.com
Nov 4, 2026, 4:07 PM4h ago
Full-timeColombo, Western ProvinceManagementManager

About the role

The Manager – Enterprise Security will lead and enhance the organization's information security management framework, governing cybersecurity risks and overseeing security operations and incident response. The role involves directing vulnerability assessments, ensuring regulatory and policy compliance, and providing executive-level security risk reporting across a multi-cloud enterprise environment. Key responsibilities include managing cyber risk assessments, incident response protocols, vulnerability management, security audits, and driving cybersecurity awareness programs. The position requires a bachelor's degree in a relevant field, recognized security certifications, and hands-on experience with VAPT tools, SIEM platforms, and cloud IaaS environments. The company is a leading diversified conglomerate in Sri Lanka, offering a high-performance technology environment and executive leadership opportunities.

Must have

  • Bachelor’s Degree in Information Systems, Computer Science, Cybersecurity, Information Technology, Business Administration, Marketing, or Finance / Management Accounting.
  • Recognized security certifications such as CISSP, CISA, or CISM are highly required.
  • Hands-on experience with VAPT tools, SIEM platforms, cyber risk management, security auditing, and major cloud IaaS environments (provisioning, monitoring, maintenance, and troubleshooting).
  • Strong working knowledge of OWASP, SANS, WASC, and Secure SDLC methodologies.
  • Exceptional analytical, investigative, and problem-solving capabilities, with strong communication skills to present security findings to senior leadership.

Technologies

  • CISM
  • CISSP
  • Cybersecurity
  • OWASP
  • Penetration Testing
  • SDLC
  • SIEM

Highlights

The position is based in Sri Lanka and is a full-time executive leadership role. Recognized security certifications such as CISSP, CISA, or CISM are highly required. The company operates across multiple sectors and emphasizes information security as a strategic priority.