Information Security Manager

NFQ

Information Security Manager responsible for the security programme addressing significant risks across IT, DevOps, and business teams. Engaging in governance, risk management, and decision-making.

Posted 7/22/2026full-timeVilnius • 🇱🇹 LithuaniaMid-LevelSenior💰 €3,850 - €6,600 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing information security programs, including governance, risk management, and compliance with frameworks such as ISO 27001 and NIS2. Proficient in incident response, security policy development, and effective communication of security risks to diverse stakeholders.

Highest-signal resume keywords

Information Security ManagementISO 27001 ComplianceRisk Assessment and ManagementIncident Response CoordinationSecurity Governance Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityCybersecurityRisk ManagementSecurity PoliciesIncident ResponseVulnerability ManagementEndpoint SecurityThreat FrameworksSecurity ControlsSecurity Documentation

Soft Skills

Strong CommunicationOwnershipIndependenceStructured ApproachStakeholder Engagement

Tools & Technologies

XDR/EDRSIEMMDMSecurity Awareness PlatformsVulnerability Management Tools

Certifications & Qualifications

CISSPCISMSecurity+CCSPISO 27001 Lead Implementer

Industry Keywords

Cyber ThreatsAttack MethodsRegulatory ComplianceThird-Party Risk ManagementPhishing Simulations

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own and coordinate the company’s information security programme, priorities, and improvement roadmap
Maintain and develop security governance, policies, procedures, risk registers, and incident response documentation
Assess security risks, identify control gaps, and translate findings into practical, prioritised actions
Work with security tools and platforms such as XDR/EDR, SIEM, vulnerability management, MDM, and security awareness platforms
Coordinate security improvements with IT, legal, and external partners
Support ISO 27001, NIS2, audits, regulatory requirements, and third-party or supplier risk management activities
Evaluate security vendors and services, monitor their effectiveness, and coordinate specialised security activities when external expertise is required
Investigate security alerts and coordinate an effective response to security incidents
Communicate security risks, priorities, and decisions clearly to technical and non-technical stakeholders

Requirements

What you’ll need

At least 4 years of experience in information security, cybersecurity, or a similar technical field
Practical experience managing information security activities in a business environment
Strong understanding of security governance, risk management, compliance, and common security controls
Experience with ISO 27001 or a similar security framework, together with familiarity with NIS2 requirements
Familiarity with threat frameworks such as MITRE ATT&CK and modern detection and response methodologies
Hands-on experience across several security areas, such as endpoint security, vulnerability management, or incident response
Ability to work with security platforms at an operational level, including reviewing alerts, assessing coverage, identifying gaps, and coordinating improvements
Experience creating or maintaining security policies, procedures, risk registers, and incident response documentation
Ability to investigate security alerts and coordinate incident response activities
Strong understanding of common cyber threats, attack methods, and security controls
Ability to assess risks, set priorities, and create structure in environments where processes are still developing
Experience working with security vendors, auditors, consultants, or managed service providers
Ability to communicate security risks clearly to both technical and non-technical stakeholders
Strong ownership, independence, and a structured approach to work
Fluency in both Lithuanian and English languages, written and spoken
****Nice to have:**
Relevant certifications such as CISSP, CISM, Security+, CCSP, ISO 27001 Lead Implementer, or similar
Experience with endpoint security, vulnerability management, or security awareness tools
Experience with phishing simulations, secure software development, application security, or third-party risk management
Experience in a technology, SaaS, software development, fintech, or regulated environment

Benefits

Comp & perks

Health insurance
Flexible working hours
Bonus for referrals
Employee-led workshops and office perks
Extra vacation days: 2 after working at NFQ for two years and 4 after four years on our team
Unlimited WFH (work from home) policy
WFA (work from anywhere) possibilities in NFQ - approved countries