Information Security Manager

Information Security Manager

About the role

The Information Security Manager is responsible for protecting Innotech's information assets — student and staff data, academic systems, and IT infrastructure — building the university's security policies and practices from the ground up as a new, fast-growing institution.

Responsibilities

• Develop, implement, and maintain the university's information security policies, standards, and procedures.
• Assess and manage information security risks across IT systems, academic platforms, and administrative data (student records, HR, finance).
• Monitor systems and networks for security incidents, vulnerabilities, and threats; lead incident response and investigation when issues arise.
• Ensure compliance with data protection legislation (including Kazakhstan's personal data law) and relevant industry standards.
• Manage access controls, user permissions, and data protection measures across university systems.
• Conduct regular security audits, vulnerability assessments, and penetration testing (in-house or via vendors).
• Coordinate with IT, academic, and administrative teams to embed security practices into daily operations and new projects.
• Deliver security awareness training and guidance for staff and students.
• Manage relationships with external security vendors, auditors, and consultants as needed.
• Prepare regular reporting on the information security posture for university leadership.

Requirements

• 3+ years of experience in information security, IT risk management, or a related role.
• Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NIST) and Kazakhstan's data protection requirements.
• Experience with security tools for monitoring, vulnerability management, and incident response.
• Practical understanding of network security, access management, and data protection principles.
• Ability to translate technical risk into clear guidance for non-technical stakeholders.
• Strong organizational skills and ability to build policies and processes from scratch.
• English at a level sufficient to work with ASU materials and international partners (from Intermediate).
• A plus: relevant certification (CISSP, CISM, or similar) and experience in an educational institution.

Conditions

Work at a fast-growing international education venture, a partner of Arizona State University. Office in Almaty. Compensation discussed following the interview.