Define, implement and maintain EID’s Information Security Management System (ISMS);
Ensure compliance with applicable security standards and regulations (e.g. ISO 27001, NIS/NIS2, defence-related requirements);
Develop, review and enforce information security policies, procedures and controls;
Identify, assess and manage information security risks and vulnerabilities;
Monitor security incidents, coordinate response actions and lead incident management processes;
Oversee third-party and supplier security requirements and assessments;
Conduct internal audits, risk assessments and support external audits and certifications;
Promote security awareness and training initiatives across the organization;
Report on security posture, risks and KPIs to management;
Work closely with IT, Engineering, Legal and HR teams to ensure security is embedded in processes and projects.

Degree in Information Systems, Computer Engineering, Cybersecurity, or related field;
Strong sense of responsibility and confidentiality;
Analytical mindset with a risk-based approach;
Ability to translate technical security topics into business language;
Proactive, structured and detail-oriented;
Comfortable working with cross-functional teams and multiple stakeholders;
Capable of managing priorities and responding effectively under pressure;
Motivated to continuously improve security maturity and practices.
3–5 years of experience in Information Security, Cybersecurity or similar roles;
Strong knowledge of information security frameworks and standards (ISO 27001, NIST, CIS, etc.);
Experience with risk management, incident response and security governance;
Understanding of network, systems and application security principles;
Experience working in regulated or high-security environments (industry, defence, critical infrastructure) is a plus;
Professional certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer/Auditor) are valued;
Good communication skills in English.

CIS Security Manager

Key skills