Cybersecurity Manager

Job Posting Organization:
CIMMYT, the International Maize and Wheat Improvement Center, is a non-profit, international organization that focuses on addressing global agricultural challenges. Established to enhance the production systems of staple crops such as maize and wheat, CIMMYT operates primarily in the Global South. The organization is dedicated to improving the livelihoods of resource-poor farmers through applied agricultural science and strong partnerships. As a core CGIAR Research Center, CIMMYT plays a vital role in global security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">food security efforts, aiming to reduce poverty and enhance nutrition" style="border-bottom: 1px dotted #007bff !important;">food and nutrition security while improving natural resource management. The organization is committed to fostering a productive, inclusive, and resilient agrifood system within planetary boundaries. For more information, visit their website at https://www.cimmyt.org/.

Job Overview:
The Cybersecurity Manager at CIMMYT is a critical role responsible for safeguarding the organization's information assets that support its global research operations. The individual in this position will lead the information security function and manage the Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022 standards. This role requires a hands-on approach to oversee the security platforms and the team responsible for their operation. The Cybersecurity Manager will be expected to continuously improve the ISMS, ensuring that all security measures are effective and compliant with established standards. The position also involves preparing and presenting risk assessments, managing security incidents, and coordinating with regional IT specialists to enhance the organization's overall security posture.

Duties and Responsibilities:
The Cybersecurity Manager will have a comprehensive set of responsibilities, including leading the information security function at CIMMYT, managing and developing the cybersecurity team, and ensuring effective performance assessments and technical mentoring. The role involves operating and improving the ISMS, maintaining supporting standards and procedures, and preparing risk and control reports. The manager will also be responsible for hands-on configuration and troubleshooting of security platforms, managing vulnerability and patch management processes, and overseeing security incident response from detection to post-incident review. Additionally, the manager will validate control effectiveness, support internal and external audits, manage security suppliers and licenses, and coordinate security standards across country offices. Monthly reporting on security posture and performance metrics will also be part of the role.

Required Qualifications:
Candidates must possess a Bachelor’s degree in computer science, Information Technology, Information Security, or a related field. A master's degree is considered an advantage. A security certification such as CISSP, CISM, or ISO/IEC 27001 Lead Implementer or Lead Auditor is required, with additional technical platform certifications being beneficial. Candidates should have at least 8 years of professional experience in information security, including a minimum of three years in a managerial or supervisory role. Practical experience with ISO/IEC 27001 management systems and managing security vendors and budgets is essential. Experience in multi-country organizations or international research and development settings is also advantageous.

Educational Background:
The educational background required for this position includes a Bachelor’s degree in a relevant field such as computer science, Information Technology, or Information Security. A master's degree is preferred but not mandatory. Candidates must also hold a recognized security certification, which demonstrates their expertise in the field of information security.

Experience:
The position requires a significant level of experience, specifically a minimum of 8 years in the information security domain. Out of these, at least three years should be spent in a managerial or supervisory capacity, overseeing a technical team. Candidates should have practical experience in implementing and operating an ISO/IEC 27001 management system, which includes control mapping and audit evidence production. Experience managing security vendors and budgets is also crucial, along with familiarity in working within multi-country or distributed organizations.

Languages:
While the job description does not specify mandatory languages, proficiency in English is likely essential given the international nature of CIMMYT's operations. Additional languages may be beneficial, particularly those relevant to the regions where CIMMYT operates.

Additional Notes:
This position offers an attractive remuneration package that includes benefits in accordance with Mexican Labor Law, such as a year-end bonus equivalent to 40 days of salary, a vacation premium of 56%, life and medical insurance, supermarket coupons, and a savings fund. The organization also provides social benefits under Mexican law (IMSS, SAR / Infonavit). Candidates must have legal documentation to work in Mexico, and only shortlisted candidates will be contacted. CIMMYT promotes a multicultural work environment that values diversity and gender equality.