Information Security Manager Job Description Template

The information security manager (ISM) is a critical member of the chief information security officer’s (CISO’s) team. The ISM’s role — which is a midlevel managerial position — is to act as an interface between the CISO’s strategic and process-based activities and the work of the technology-focused analysts, engineers and administrators in the IT organization. The ISM must be able to translate the IT-risk requirements and constraints of the business into technical control requirements and specifications, as well as develop metrics for ongoing performance measurement and reporting. The ISM coordinates the IT organization’s technical activities to implement and manage security infrastructure, and to provide regular status and service-level reports to management.