Information Security Manager

Сипаттама

Information Security Manager About the role The Information Security Manager is responsible for protecting Innotech's information assets — student and staff data, academic systems, and IT infrastructure — building the university's security policies and practices from the ground up as a new, fast-growing institution. Responsibilities Develop, implement, and maintain the university's information security policies, standards, and procedures. Assess and manage information security risks across IT systems, academic platforms, and administrative data (student records, HR, finance). Monitor systems and networks for security incidents, vulnerabilities, and threats; lead incident response and investigation when issues arise. Ensure compliance with data protection legislation (including Kazakhstan's personal data law) and relevant industry standards. Manage access controls, user permissions, and data protection measures across university systems. Conduct regular security audits, vulnerability assessments, and penetration testing (in-house or via vendors). Coordinate with IT, academic, and administrative teams to embed security practices into daily operations and new projects. Deliver security awareness training and guidance for staff and students. Manage relationships with external security vendors, auditors, and consultants as needed. Prepare regular reporting on the information security posture for university leadership. Requirements 3+ years of experience in information security, IT risk management, or a related role. Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NIST) and Kazakhstan's data protection requirements. Experience with security tools for monitoring, vulnerability management, and incident response. Practical understanding of network security, access management, and data protection principles. Ability to translate technical risk into clear guidance for non-technical stakeholders. Strong organizational skills and ability to build policies and processes from scratch. English at a level sufficient to work with ASU materials and international partners (from Intermediate). A plus: relevant certification (CISSP, CISM, or similar) and experience in an educational institution. Conditions Work at a fast-growing international education venture, a partner of Arizona State University. Office in Almaty. Compensation discussed following the interview.