Annapurna are partnered with a leading KRITIS organisation to support them in a search for an IT Risk & Security Manager, which reports directly to the CIO.

This individual is responsible for translating the IT risk requirements into actionable security measures and technical controls. Whilst ensuring security protocols align with the business objectives and regulatory standards, in addition to developing performance metrics to monitor and report on the effectiveness of IT security initiatives.

Key Responsibilities

• Develop and enforce security governance frameworks, ensuring alignment with organizational and regulatory requirements.
• Oversee IT risk assessments, audit preparations, and compliance evaluations.
• Implement security awareness programs to foster a culture of cybersecurity across the organization.
• Lead security operations, including incident response and escalations, ensuring rapid resolution of security events.
• Drive key security projects, from inception through to completion, ensuring they meet strategic objectives.
• Advance operational technology (OT) security measures and governance protocols to protect critical infrastructure.
• Manage external penetration tests to assess and strengthen system resilience.

Qualifications :