Assistant Manager, IT Security

About the role

The Assistant Manager, IT Security will protect IBEX’s infrastructure from emerging threats and support business objectives through proactive information‑security practices. Reporting to senior security leadership, the role combines hands‑on technical work with coordination of the IT Security Roadmap and governance processes.

Key responsibilities

• Oversee enterprise security operations, monitoring events, threats and risks across the whole infrastructure.
• Lead incident‑response activities, ensuring investigation, escalation, containment and resolution.
• Review complex security incidents and provide strategic remediation recommendations.
• Drive vulnerability‑management programmes, prioritising risk and tracking remediation with IT teams.
• Ensure enforcement of security baselines and hardening standards on network and infrastructure components.
• Manage security technologies such as NGFW, IDS/IPS, WAF, SIEM, email and endpoint protection, IAM/PAM and wireless security.
• Maintain continuous compliance with PCI‑DSS, SOC 2, ISO 27001 and CIS Controls.
• Develop, tune and optimise SIEM use cases to improve detection accuracy.
• Lead threat‑hunting initiatives using the MITRE ATT&CK framework.
• Provide guidance on cloud security controls for AWS, Azure and GCP.

Required profile

• Proven experience overseeing end‑to‑end security operations, including SIEM administration and threat detection.
• Strong background in incident response, vulnerability assessment and security baseline enforcement.
• Demonstrated ability to ensure compliance with ISO 27001, SOC 2 and PCI‑DSS frameworks.
• Experience coordinating with vendors and leading security assessments of new technologies.

Required skills

• Next‑Generation Firewall (NGFW), IDS/IPS, Web Application Firewall (WAF).
• Security Information and Event Management (SIEM) platforms – administration, tuning, use‑case development.
• Email security, endpoint protection, Identity and Access Management (IAM), Privileged Access Management (PAM/PIM).
• Cloud security controls for AWS, Azure and Google Cloud Platform.
• Vulnerability management tools and processes.
• Knowledge of PCI‑DSS, SOC 2, ISO 27001, CIS Controls and MITRE ATT&CK framework.
• Network security concepts – firewalls, VPN, DNS, secure architecture.