Senior Manager Information Security

at  Gravitee

ABOUT GRAVITEE

In 2015, four developers met while working on API strategy and implementation. The API world and API platforms were unnecessarily complex and no powerful open source solutions existed. Together, they decided to build a complete API platform providing business owners effortless control over their entire API ecosystem. Gravitee.io is the leading open-source API platform, enabling worldwide developers and business users to build, manage and monitor their APIs. As a team, we are driven by the purpose of giving customers effortless control over their growing API ecosystem and a strong belief in the ethos of open source. By understanding customers’ connectivity challenges and anticipating their needs, we provide the most intuitive platform. We are growing rapidly and we are looking for exceptional people who are excited to join us on this career-defining journey.

In addition, the Information Security Manager is expected to learn and develop skills to become an SME in all security and data privacy-related points of the Gravitee orb of products and services to better support our team and clients.

• Take ownership of the allocated processes and procedures in our ISO 27001/27701
• Review processes and procedures to make sure that they are continuously improved and fit for purpose
• Be the first point of escalation within the InfoSec and Data Privacy team
• Respond to incidents and support on the triage, resolution and forensics
• Review access and controls in place on a regular and scheduled basis
• Be willing to learn and adapt to new situations and evolve your knowledge
• Provide the Gravitee Global Information Security Awareness Training sessions and other training sessions as needed

ESSENTIAL SKILLS - The right candidate will possess at least the following skills:

• Good knowledge of GDPR or any other Data Privacy regulations and laws
• Must have a working knowledge o

THE ROLE & WHY IT EXISTS

Gravitee.io is taking APIs to the next level — we are the premier, open-source API platform and we want everyone to know how amazing our software is. To make this happen, we are seeking someone who will be our SME in the making and that will support our teams and clients in matters related to information security and data privacy.
This is where you come in.
We are currently recruiting for a Senior Manager Information Security to join our growing business. In this newly created role, you will support and become a SME in Information Security, Compliance and Data Privacy while reporting to the Chief Technology Officer. You’ll be handling our information security information management system (ISPIMS- ISO 27001/27701) making sure that everyone and everything is compliant with our policies and SOP’s. This will also include our privacy information management and learning how to use and maintain compliance with some of the best standards out there.

WHAT YOU WILL BE DOING

Your daily to-do list will feature some or all of the following, but is not limited to:
The primary responsibility of the Senior Manager Information Security is to be part of the ISO 27001/27701 assurance and continuous improvement process and support the Head of Information Security in any related tasks.

In addition, the Information Security Manager is expected to learn and develop skills to become an SME in all security and data privacy-related points of the Gravitee orb of products and services to better support our team and clients.

• Take ownership of the allocated processes and procedures in our ISO 27001/27701
• Review processes and procedures to make sure that they are continuously improved and fit for purpose
• Be the first point of escalation within the InfoSec and Data Privacy team
• Respond to incidents and support on the triage, resolution and forensics
• Review access and controls in place on a regular and scheduled basis
• Be willing to learn and adapt to new situations and evolve your knowledge
• Provide the Gravitee Global Information Security Awareness Training sessions and other training sessions as needed.

ESSENTIAL SKILLS - The right candidate will possess at least the following skills:

• Good knowledge of GDPR or any other Data Privacy regulations and laws
• Must have a working knowledge of