Manager I, Information Security

About the role

Catholic Relief Services (CRS) is hiring a Manager I, Information Security to safeguard its digital assets. The role supports the implementation, configuration, administration and ongoing management of information security controls for end-user systems, networks, applications and sensitive data, working closely with IT leadership and coordinating security across technical support tiers and business units. It is a supervisory position with up to 10% travel.

Key responsibilities

• Supervise the Information Security team, coach and mentor junior staff.
• Oversee the design, implementation and continuous improvement of information security management systems, projects and initiatives.
• Lead the development and maintenance of security policies, procedures and access controls, aligned with agency standards and regulatory requirements.
• Support alignment with frameworks such as CIS Controls, ISO 27001, NIST and GDPR.
• Lead Security Operations (SecOps) and incident response, working with the managed MXDR vendor and third parties, and prepare security incident and risk reports for senior management.
• Monitor software compliance, lead the agency-wide Information Security Awareness program, and develop KPIs and metrics for the program.
• Support risk management, audit readiness and security assessments, and evaluate emerging technologies and security solutions.

Required profile

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field, or equivalent experience.
• At least 5 years of progressive experience designing, implementing and managing information security systems, processes and controls, preferably in a complex organization.
• Minimum of two years of supervisory or management experience.
• Demonstrated experience leading information security programs and managing complex security projects.
• Fluency in English; French or Spanish preferred.
• Willingness to travel up to 10%; ability to legally work where the position is located.

Required skills

• Knowledge of ISO 27001, NIST 800, COBIT, CIS, PCI DSS, NIST Cybersecurity Framework and/or Cyber Essentials.
• Strong background in incident response, detection, investigation, containment and recovery.
• Preferred: experience with Windows, Active Directory, Azure AD, Microsoft 365, Microsoft Defender XDR, PAM and MFA solutions, and an ITIL Foundation certification; CAP, CEH, CISSP or CISM is a plus.

What we offer

• U.S.-based staff receive medical, dental, life insurance, vision and a retirement savings plan; benefits for staff outside the U.S. depend on the country of employment.
• A collaborative, mission-driven culture within an international humanitarian agency.