Digital Security Manager

Purpose of the position

Lead the strategy, design, implementation, and evolution of the organization's cybersecurity capabilities, ensuring the protection of digital assets, effective management of technological risks, and timely response to security threats and incidents.

Main Responsibilities

• Define and execute the Digital Security strategy, ensuring the protection of technological assets and alignment with business objectives.
• Design, implement, and evolve the cybersecurity architecture and controls to protect identities, devices, applications, infrastructure, and critical data.
• Lead the detection, response, and remediation of security incidents, ensuring effective management of risks, vulnerabilities, and emerging threats.
• Manage specialized vendors and cybersecurity services, including monitoring, incident response, pentesting, forensic analysis, and vulnerability management.
• Influence and advise business and technology leaders, driving policies, best practices, and an organizational culture of digital security based on prevention, resilience, and continuous improvement.

Non-negotiable Requirements

Education and Experience

• Bachelor's degree in Systems Engineering, Information Technology, Cybersecurity, or a related field.
• More than 8 years of professional experience in Information Technology, Infrastructure, or Cybersecurity.
• At least 5 years leading Digital Security or Cybersecurity functions.
• Proven experience designing and implementing corporate-level security strategies, architectures, and controls.
• Experience leading technical teams and managing specialized security vendors.
• Experience coordinating SOC, MDR, threat monitoring, pentesting, forensic analysis, and incident response services.
• Direct experience managing critical cybersecurity incidents and containment, recovery, and remediation plans.
• Experience presenting risks, priorities, and action plans to business directors or leadership.
• Experience influencing organizational decisions without relying on direct authority.
• Demonstrated ability to translate technical risks into business impacts and actions.

Technical Knowledge

Solid experience in several of the following disciplines:

• EDR and XDR.
• Next-generation firewalls.
• Vulnerability management.
• Web application security (WAF).
• Information protection (DLP).
• Privileged Access Management (PAM).
• Email security.
• Identity and Access Management.
• Active Directory.
• Incident response and threat management.
• Ethical hacking and penetration testing.
• Security in hybrid and/or cloud environments.
• Security frameworks such as NIST, CIS Controls, or ISO 27001.