Information Security Manager

Description

Job Summary: We are seeking an Information Security Manager to define, coordinate, and ensure digital security in IT and OT environments while fostering a security culture. Key Highlights: 1. Accelerate the energy transition at a leading and diversified company. 2. Develop your career in a dynamic environment with growth opportunities. 3. We promote well-being, work-life balance, and diversity and inclusion. **Join ENGIE and be part of the most important adventure of the century!** At ENGIE Energía Perú, we accelerate the transition toward a carbon-neutral economy. We are the country’s most diversified power generation company—both in energy mix and geographic location. Additionally, we are the \#1 energy sector employer in Peru for attracting and retaining talent and rank among the Top 50 overall companies in Peru. As part of the ENGIE Group—the world’s largest independent energy producer, with 96,000 employees across 31 countries—we work together under a “One ENGIE” culture that values diversity, ethics, innovation/agility (including technological transformation), and safety in all our relationships. If you share our optimistic vision of the energy transition and want to make a positive impact on the planet, we’re looking for you! Join our community of Transition Makers to build a sustainable future full of opportunities. At ENGIE, we value: * Professional development: Grow your career in a dynamic environment offering continuous growth opportunities, ongoing training, and development. * Well-being and balance: We foster a safe and trusting workplace where you can be yourself and fully express your potential. We value the balance between personal and professional life. * Diversity, equity, and inclusion: We are committed to equal opportunity for all, regardless of origin, gender, age, sexual orientation, disability, or socioeconomic status. **Information Security Manager** **Your key responsibilities will include:** * Digital Security Governance and Strategy: Define the Information Security Policy, digital strategy, and Security Program for ENGIE. * IT and OT Risk Management: Coordinate operational and strategic risk management, as well as detection, containment, and incident response activities. Approach aligned with ISO 22301. * Compliance, Regulations, and Ethics: Ensure compliance with IT and OT security guidelines. Manage information delivery for annual audits including ISO 27001, Internal Audit\-INCOME, and others. * Security Culture Management: Lead awareness-raising and corporate communication activities regarding security policies and controls. * Application Security Management: Define controls and metrics to be implemented in internally developed or third-party systems, based on prior risk assessment. * Operations and Technological Resilience: Manage monitoring of events, vulnerabilities, and security updates to protect critical infrastructure and enable rapid recovery from incidents. * Financial and Project Management: Administer the corporate security budget and project portfolio, optimizing investment to ensure sustainability of the company’s digital ecosystem. * Industrial Security (ICS): Implement processes/procedures to maintain confidentiality, availability, and integrity of plant data (tags) displayed on new digital platforms such as PI4Cloud/Darwin, SCADA/DCS within the OT network. **What do we need from you?** * Knowledge of ISO 27001 and IEC 62443 standards, SCADA system protection, industrial networks, and communication protocols used in power plants. * Familiarity with cybersecurity tools. * Knowledge of industrial cybersecurity platforms (NOZOMI). * Proficiency in ISO 27001, ISO 22301, and internal control frameworks (COBIT).\[DB1\.1]\[BR1\.2]\[DB1\.3] * Advanced experience in defensive cybersecurity techniques, vulnerability management, and digital crisis response. * Knowledge of budget management and ROI evaluation for security technologies. * Intermediate English proficiency. **We expect you to:** * Lead and coordinate the implementation, control, and monitoring of information security and digital security policies to ensure availability, confidentiality, and integrity of data in Information Technology (IT) and Operational Technology (OT) environments. **Benefits we offer you:** * 100% covered medical insurance premium. * 100% covered oncology insurance premium. * Performance bonus. * Occupational health and safety bonus. * Training and workshops. **Are you ready to be part of the change?** At ENGIE, we don’t just talk about transforming the world—we make it happen! Apply now and become a \#TransitionMaker to leave a positive footprint on the planet. **Business Unit:** Support Functions In Geographies **Division:** SF In LATAM \- Peru **Legal Entity:** ENGIE ENERGIA PERU S.A. **Professional Experience:** Skilled ( \>3 experience \<15 years) **Education Level:** Bachelor's Degree **Company Name:** ENGIE Perú Our values Inclusion and diversity lie at the heart of our human resources policy. We ensure equal opportunity for all candidates and are committed to creating the most accessible workplace possible.