Information Security Manager

Ciklum is looking for an Information Security Manager to join our team full-time in Ukraine.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role:

As an Information Security Manager, become a part of a the Product and Engagement Domain within their technology organization. In this role, you will perform a
crucial function in protecting IT organization, driving a security-first culture, and ensuring customer-facing search capabilities and critical digital assets remain secure and resilient.

As an Information Security Manager (ISM) you will promote a security first culture at the project. You will contribute to the delivery of an information security strategy to address the evolving business risk and empower the Domain to deliver the prioritised roadmap. You will lead the collaboration with stakeholders to communicate and embed secure ways of working with regular cadence and engagement.

This will include protecting the client's brand and its customers, detecting and responding to incidents, strengthening our defences, reducing the attack surface, proactively highlighting risks to the business and promoting security awareness as second nature.

You will drive adoption of and adherence to security policies, standards, and controls through the provision of expert advice and guidance. Protect our most critical assets and ensure appropriate assurance and rigorous testing is in place. You will ensure local security incidents are managed effectively, and that lessons learned, and audit findings are remediated. You will have come from a technical background and having good knowledge of security in AWS Cloud environments having held a technical role. Ensure effective security operations (e.g. vulnerability scanning, patching). 

Protect the integrity, availability, authenticity, non-repudiation and confidentiality of information and data in storage and in transit. Manage risk in a pragmatic and cost-effective manner to ensure stakeholder confidence. You will report on the overall effectiveness of the security programme on the Domain against defined key performance indicators and drive continuous improvement.

Our information security team works in collaboration with business and IT teams across our many businesses. You will build strong working relationships influence others to do the right thing to Protect our Smile. Security is part of everyone’s job. We practise secure behaviours first in everything we do. 

Responsibilities:

• Build and maintain a security-first culture
• Drive the adoption of and compliance with security policies, standards, and controls
• Contribute to the overall information security strategy
• Ensure effective security operations (such as vulnerability scanning and patching) and rigorous testing
• Manage local security incidents
• Oversee remediation actions based on external audit findings
• Protect the integrity, availability, authenticity, non-repudiation, and confidentiality of data at rest and in transit
• Identify and manage security risks
• Report on security programs using defined KPIs and drive continuous improvement

Requirements:

• Strong experience implementing an Information Security Management System (ISMS) in a large organization
• Good understanding of international regulations, particularly data privacy laws
• Solid knowledge of security standards and frameworks, such as ISO, NIST, PCI-DSS, OWASP, and ITIL
• Good understanding of security within AWS cloud environments
• Technical background with previous experience in a hands-on technical role (such as penetration testing, security analysis, or vulnerability scanning)
• Strong understanding of security operations and incident management across cloud and on-premises environments
• Excellent communication skills

Desirable:

• AWS Cloud Fundamental or Practitioner certification
• Professional security certifications such as ISO 27001 Lead Implementer, CompTIA Security+, CISMP, CISSP, CISM, or CISA

What’s in it for you?

• Strong community: Work alongside top professionals in a friendly, open-door environment
• Growth focus: Take on large-scale projects with a global impact and expand your expertise
• Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications
• Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands-on experience with cutting-edge technologies
• Flexibility: Enjoy radical flexibility – work remotely or from an office, your choice
• Care: We’ve got you covered with company-paid medical insurance, mental health support, and financial & legal consultations

About us:

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress.

As one of Ukraine’s largest IT companies and a top employer recognized by Forbes, we’ve spent over 20 years delivering meaningful tech solutions. We proudly support diverse talent and military veterans, recognizing their unique skills and perspectives they bring to shaping the future.

Explore, empower, engineer with Ciklum!

Interested already? We would love to get to know you! Submit your application. We can’t wait to see you at Ciklum.

#LI-NO1