Hybrid Information Security Manager na billups

Company Overview:

Reinventing out-of-home planning and placement for the performance age. Billups is the leading independent out-of-home (OOH) specialist in North America and is continuing to grow in the EMEA and APAC regions. Delivering OOH-managed services globally, helping advertisers and agencies strengthen media performance through our patented analytics and measurement platform. Our mission is to transform the power of places to connect brands with their consumers.

Role Summary:

The Information Security Manager is responsible for overseeing the security posture of billups' IT infrastructure and data assets. This role will lead the development and implementation of security policies, procedures, and controls to protect the company from cyber threats. The Information Security Specialist will work closely with IT, legal, and business teams to ensure that all security measures are aligned with industry best practices and regulatory requirements.

The Information Security Manager will be responsible for identifying, assessing, and mitigating cyber risks. This includes conducting security assessments, vulnerability scans, and penetration testing. The role will also be responsible for incident response planning and execution, as well as for educating employees on cybersecurity best practices.

Core Role Duties:

• Conduct cookie and tracking technology assessments for all web properties.

• Evaluate and track third-party vendor risk.

• Coordinate external audits and provide compliance documentation as needed.

• Maintain the risk register and assist in conducting regular risk assessments focused on advertising data flows and user profiling.

• Generate compliance reports and dashboards for leadership and clientsDevelop and implement cybersecurity policies, procedures, and controls.

• Conduct security assessments, vulnerability scans, and penetration testing.

• Investigate and respond to security incidents.

• Develop and maintain an incident response plan.

• Educate employees on cybersecurity best practices.

• Stay abreast of emerging cybersecurity threats and vulnerabilities.

• Advise on security controls for new technologies and services.

• Work with IT and legal teams to ensure compliance with relevant regulations.

• Monitor and analyze security logs and alerts.

• Conduct IT security-focused training.

• Vendor assessments and onboarding

• Maintain security documentation.

Key Deliverables:

• A comprehensive cybersecurity program that meets the needs of the business.

• A well-documented incident response plan.

• A highly trained and security-conscious workforce.

• Thorough and digestible documentation.

• Compliance with all relevant cybersecurity regulations.

Leadership Competencies:

• Strong analytical and problem-solving skills.

• Excellent communication and interpersonal skills.

• Ability to work independently and as part of a team.

• Strong leadership and organisational skills.

• Ability to prioritise and manage multiple tasks.

Required Interpersonal Skills:

• Expressing ideas and thoughts clearly, both orally and in written form.

• Exceptional attention to detail with proven ability to maintain high levels of accuracy in complex tasks.

• Strong ability to receive and apply constructive feedback to achieve improved outcomes.

• Exhibiting good listening, comprehension, and engagement.

• Good relationship management skills, including communicating with senior directors and peers – internally and externally - and establishing and maintaining excellent rapport.

• Demonstrating tact and diplomacy in communicating with clients/agencies and media suppliers, as well as with colleagues internally.

• Bringing creativity and passion to your work, embracing change and innovation.

• Exhibiting billups’ values (particularly under pressure) and inspiring others to do the same.

• Collaborating and contributing to the establishment of a positive team spirit. Being proactive and a team player, with the ability to engage others.

• Skilled in navigating change management gracefully.

Qualifications:

Ability to perform essential job duties with or without reasonable accommodation and without posing a direct threat to the safety or health of employees or others. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform essential duties.

Required Experience:

• 6+ years of experience in cybersecurity, with a focus on information security, threat intelligence, and incident response.

• Experience in incident response, vulnerability management, and compliance management.

• Experience with privacy regulations and GRC ToolsExperience with security information and event management (SIEM) systems.

• Experience with security controls such as firewalls, intrusion detection systems, and endpoint security.

• Experience with security audits and compliance assessments.

• Experience with cloud security best practices.

• Strong understanding of cybersecurity frameworks such as the NIST Cybersecurity Framework and ISO 27001.

Education & Experience:

Bachelor’s degree in computer science, information security, or a related field.

Relevant cybersecurity certifications such as CISSP, CISM, or CISA (preferred).

Scam Warning:
Please be aware that the billups Global Talent Acquisition team will only contact you directly from an official @billups.com email address. We do not use third-party platforms or unofficial email domains—such as careers.info—to make job offers or request personal information.
billups will never:

• Ask you to provide passport information, utility bills, or other sensitive personal documents during the interview process.

• Request that you purchase work equipment or send money in any form.

• Make job offers through unofficial channels or email addresses not ending in @billups.com.

To be considered for any open position at billups, you must apply directly through our official website at billups.com/careers. We do not accept applications via email, social media, or third-party job boards.
If you receive any suspicious communication claiming to be from billups—especially from non-@billups.com email addresses—do not respond or share any personal or financial information.
To verify the legitimacy of any message or job opportunity, please contact us directly at [email protected] or visit our official website.
Your safety and security are important to us — stay alert!