Team Lead, Information Security & Risk Management

About the role

The Information Security Lead provides cybersecurity expertise across security awareness, identity and access management, cloud security, risk assessments and security projects. Working closely with business and IT teams, the role ensures security risks are identified, mitigated and that security controls are embedded in new technologies and initiatives.

Key responsibilities

• Act as the security representative on business and technology initiatives, advising on risk and controls.
• Lead and support cybersecurity projects from planning through implementation.
• Maintain an accurate inventory of critical information systems and data assets.
• Support the IT risk management framework, maintain the risk register and prioritize remediation.
• Manage the enterprise security awareness and phishing simulation program, including campaigns and training metrics.
• Design, implement and manage IAM controls such as Azure PIM and privileged access management.
• Ensure a strong cloud security posture across Azure and SaaS environments.
• Support PCI DSS compliance activities and audits.

Required profile

• Senior‑level security professional with proven experience in guiding business and IT teams.
• Strong understanding of risk management, security governance and compliance frameworks.
• Excellent communication and advisory skills to influence stakeholders.

Required skills

• Azure cloud platform
• Azure Privileged Identity Management (PIM)
• Privileged Access Management (PAM)
• Identity and Access Management (IAM)
• Cloud security best practices
• PCI DSS compliance
• Security risk assessment methodology
• Security awareness training and phishing simulation