Responsible for leading and maturing the company’s global information security polices, governance framework across warehouse and corporate environments.
Ensures that Neovia maintains a structured, risk-based, and scalable security posture aligned with business objectives, customer expectations, regulatory obligations and the ever-evolving threat landscape.
Maintains awareness of new threats and creates vehicles for quickly addressing day zero risks.
Supports global locations, ensuring that information security policies, standards and control objectives are consistently defined, governed and aligned with operational reality.
Drives the development and maintenance of the Information Security Management System (ISMS), supports certificate initiatives (ISO 27001 etc), oversees enterprise security risk management, and ensures structured audit readiness across regions by partnering with Neovia’s internal GRC and legal teams.
Responsible for the security strategy, working with Engineering and leadership to recommend software and solutions to solve complex problems and make Neovia safer.
Helps evaluate security capabilities, identify maturity gaps, and provide structured recommendations to IT and executive leadership to ensure ongoing improvement of Neovia’s security posture.
Owns end-user testing and education.

Bachelor’s in Computer Science; Information Systems or equivalent.
Minimum 5 years of experience in Information Security, with exposure to Governance, Risk and Compliance (GRC).
Demonstrated experience building, maintaining, or maturing an Information Security Management System (ISMS).
Relevant experience supporting or leading ISO 27001 certification or similar regulatory frameworks.
Experience managing enterprise security risk registers and facilitating formal risk assessments.
Experience developing and maintaining security policies, standards, and governance documentation.
Experience evaluating and recommending security technologies aligned to strategic control objectives.
Experience reviewing third-party/vendor security questionnaires and assessing risk exposure.
Experience operating within multi-site or global environments.
Strong written communication skills with ability to produce executive-level documentation and reporting.

Manager, Information Security

Key skills