Contract Security Manager

Contract Security Manager

Mission of Function: Ensures all contractual agreements—both IT and Operational Technology (OT)—adhere to established cybersecurity and legal requirements. This includes reviewing, negotiating, and managing security clauses in vendor contracts, collaborating with cross-functional teams (Procurement, Supply Chain, Legal, etc.), and ensuring alignment with relevant regulatory frameworks such as ISO 27001, NIST CSF, and ISA 62443.

Qualifications:

Experience (No. of Years) Professional: Minimum 5 years’ experience in cybersecurity governance, contract negotiation, or compliance. Exposure to OT security is a plus. Prior hands-on experience in contract law or legal advisement is required.

Leadership: Experience leading small teams is an advantage but not required.

Project: Demonstrated experience working on risk-related or contract-focused projects.

Education: Bachelor’s Degree in Law, Computer Science, or other related 4-year course. A Master’s Degree in a security or legal discipline is a plus.

Certifications: Professional security certifications like CISSP, CISM, CRISC, and CISA preferred but not required. FAIR and other risk quantification certifications are a plus.

Licenses: N/A