IT Security Manager

About the role

Cenomi Retail is looking for an IT Security Manager to lead its information security strategy across a network of more than 1,600 stores in 11 countries. Reporting to the IT Director, the manager will ensure the confidentiality, integrity and availability of the organisation’s data and systems.

Key responsibilities

• Execute the organisation’s IT security strategy to protect critical assets and data.
• Define and oversee third‑party risk management, ensuring alignment with security standards.
• Set the physical security strategy and integrate it with broader security goals.
• Direct network security initiatives and align them with overall IT security objectives.
• Develop data‑protection approaches that meet regulatory requirements.
• Establish an incident‑management framework and ensure organisational preparedness.
• Incorporate security requirements into all outsourcing contracts.
• Evaluate security risks of third‑party vendors and service providers.
• Lead Vulnerability Assessment and Penetration Testing (VAPT) programmes.
• Monitor and log administrative activities, enforce privileged‑access controls and conduct regular access reviews.
• Define KPIs to measure the effectiveness of security initiatives.
• Design and deliver security training and awareness programmes.
• Stay current on emerging threats and technologies.
• Provide leadership and mentorship to a team of IT security professionals.

Required profile

• Proven experience leading IT security strategy and teams.
• Strong understanding of third‑party risk, incident management and regulatory compliance.
• Ability to translate security requirements into actionable policies and training.
• Continuous learning mindset to keep up with evolving cyber threats.

Required skills

• Microsoft Azure security
• Amazon Web Services (AWS) security
• Oracle Cloud Infrastructure (OCI) security
• Microsoft Defender XDR
• Microsoft Sentinel
• Microsoft Entra ID
• Microsoft Purview
• Microsoft Intune
• Microsoft 365 Security solutions
• Security Information and Event Management (SIEM) platforms
• Vulnerability Assessment and Penetration Testing (VAPT) methodologies