Manager I, Information Security

About the role

Catholic Relief Services (CRS) is looking for a Manager I, Information Security to safeguard the agency's digital assets. The role supports the implementation, configuration, administration and ongoing management of information security controls for end-user systems, networks, applications and sensitive data, working closely with IT Leadership and coordinating across technical support tiers and business units. It is a supervisory position.

Key responsibilities

• Supervise the Information Security team and coach and mentor junior staff.
• Oversee the design, implementation and continuous improvement of information security systems, projects and initiatives.
• Advise on and lead the development of security policies, procedures and access controls aligned with agency standards and regulations.
• Support alignment with frameworks such as CIS Controls, ISO 27001, NIST and GDPR.
• Lead Security Operations (SecOps) and incident response, working with the MXDR vendor and other third parties.
• Monitor security incidents and threat alerts, review anomalies and escalate issues per standard operating procedures.
• Lead software compliance monitoring and prepare security incident and risk reports for senior management.
• Support risk management, audit readiness and security assessments with IT Leadership.
• Evaluate emerging technologies and lead the Information Security Awareness program, including KPI reporting.

Required profile

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field, or equivalent experience.
• At least 5 years of progressive experience designing, implementing and managing information security systems, processes and controls, preferably in a complex organization.
• Minimum of two years of supervisory or management experience.
• Demonstrated experience leading or supporting information security programs and managing complex security projects.
• Strong background in incident response and security compliance, audits and regulatory frameworks (NIST, ISO 27001, GDPR).
• Fluency in English; French or Spanish preferred. Willingness to travel up to 10%.

Required skills

• Knowledge of ISO 27001, NIST 800, COBIT, CIS, PCI DSS and the NIST Cybersecurity Framework.
• Information risk management and the ability to influence business and technical leaders.
• Preferred: Microsoft Windows, Active Directory, Azure AD, Microsoft 365, Defender XDR, PAM and MFA solutions, ITIL Foundation, and certifications such as CAP, CEH, CISSP or CISM.

What we offer

• U.S.-based staff receive a benefits package including medical, dental, life insurance, vision and a retirement savings plan; benefits for staff outside the U.S. depend on the country of employment.