Information Security and Data Protection Manager

About the role

Extia is looking for an experienced Information Security and Data Protection Manager to lead its cybersecurity and privacy initiatives. You will shape the security strategy, ensure GDPR compliance, and protect the organization against evolving cyber threats.

Key responsibilities

• Develop and continuously improve the cybersecurity and data protection strategy.
• Define, maintain and enforce security policies, standards, procedures and controls.
• Manage risk assessments, vulnerability assessments, penetration testing and security audits.
• Lead incident response, business continuity and disaster recovery activities.
• Monitor and report security KPIs, risks and overall security posture to senior management.
• Coordinate security audits and drive remediation of findings.
• Promote security awareness programmes and embed Security & Privacy by Design across the organization.
• Maintain relationships with security providers, auditors and regulatory authorities.
• Stay abreast of emerging threats, technologies and regulations, recommending improvements as needed.

Required profile

• Proven experience in cybersecurity, information security governance and risk management.
• Strong knowledge of GDPR and security controls.
• Hands‑on experience with incident management, vulnerability management and security assessments.
• Excellent communication skills, able to work with senior management, technical teams and external auditors.
• Proactive, autonomous and capable of driving continuous security improvements.

Required skills

• GDPR compliance
• Penetration testing
• Vulnerability assessments
• Security audits
• Incident management