IT Infrastructure & Information Security Manager - LATAM & The Caribbean

Job Summary:

The Regional IT Infrastructure and Information Security (InfoSec) Manager will lead the governance and compliance of IT infrastructure and Information Security across the LATAM and Caribbean region. This role is responsible for ensuring the reliable operation of IT systems, protecting sensitive data, and supporting the company's strategic objectives through effective technology leadership. This includes developing and implementing IT Information Security and Infrastructure strategies, input into relative budgets, supporting and collaborating with stakeholders across the region, and group functions globally. 

Key Responsibilities:

Leadership & Management:

• Support, mentor, develop and influence the region’s in-country IT Managers and their teams, with regards to IT Infrastructure & Information Security 
• Input into regional IT budgets ensuring cost-effectiveness by working closely with in-country IT Managers on budget planning, execution and monitoring
• Develop and implement IT policies, procedures, and best practices, ensuring consistent application across all locations through collaboration with in-country IT Managers and alignment with global/group IT standards
• Oversee the relevant vendor relationships and negotiate contracts, involving in-country IT Managers in vendor selection and performance management where appropriate, ensuring compliance with group procurement and vendor management policies
• Foster strong relationships with business stakeholders to understand their needs and provide effective IT solutions, facilitating communication and collaboration between business units and in-country IT teams
• Drive innovation and explore emerging technologies to improve IT service delivery, sharing best practices and new technologies with in-country IT teams while evaluating alignment with group technology strategies
• Support regional and in-country IT Leaders and other relevant managers with the effective coordination and execution of IT related internal and external audits
• Develop and govern the Regional IT Governance Model for Mergers and Acquisitions (M&A), ensuring seamless integration of acquired companies' IT systems and alignment with group standards and methodology
• Oversee IT due diligence activities for potential acquisitions, assessing the target company's IT infrastructure, security posture, and compliance status
• Lead the IT integration planning and execution for M&A transactions, supporting the integration of systems, applications, data, infrastructure and security
• Implement KPI's to ensure effectiveness is measured, and appropriate improvement plans are implemented and tracked to completion

IT Infrastructure:

• Oversee the design, implementation, and maintenance of the regional IT infrastructure, including networks, servers, storage, and end-user devices, providing architectural guidance and support to in-country IT teams, ensuring alignment with group infrastructure standards
• Ensure high availability and performance of critical IT systems, collaborating with in-country IT Managers to implement and maintain robust systems that meet group performance and reliability targets
• Manage the relevant regional IT projects and ensure timely and within-budget delivery, providing project management support and oversight to in-country IT Infrastructure projects, adhering to group project management methodologies
• Support in-country IT Managers to develop and test local Disaster Recovery plans that align with regional strategy and meet group requirements

Information Security:

• Develop and implement a comprehensive information security program to protect company data and assets, ensuring consistent security practices across all locations through collaboration with in-country IT Managers and adherence to group security policies and standards.
• Ensure compliance with relevant security regulations and standards (e.g., GDPR, SOX, ISO 27001), providing guidance and support to in-country IT Managers on compliance requirements, and ensuring compliance with group frameworks
• Together with the Group Information Security team, conduct regular security assessments and vulnerability scans, coordinating with in-country IT teams on vulnerability remediation 
• Manage security incidents and breaches, work with in-country IT Managers to investigate, resolve, perform root cause analysis and implement corrective actions. Align to group incident response process and procedures
• Educate employees in the region on security best practices and raise awareness, providing training materials and resources to in-country IT Managers for local delivery, aligned with group security awareness and training programs
• Assess the security posture of potential acquisition targets and develop integration plans to address any security gaps
• Ensure that acquired companies' IT systems comply with group security policies and standards

Collaboration & Communication:

• Effectively communicate IT strategies and initiatives to stakeholders at all levels, including regular communication and updates to in-country IT Managers regional leadership
• Collaborate with other regional and global IT teams to ensure alignment and consistency, working closely with in-country IT Managers to ensure regional alignment and adherence to group IT strategies
• Build strong relationships with key business leaders across the region, facilitating communication and collaboration between business units and in-country IT teams
• Collaborate with corporate development and M&A teams to provide IT expertise and support during the M&A proces
  
  

Other Requirements:

• Willingness to travel within the region as needed
• Ability to work in a matrix reporting environment
• Fluent in Spanish and English; proficiency in Portuguese or other regional languages would be an advantage

Requirements:

• Education: Bachelor's degree in Computer Science, Information Systems, or a related field. 
• Experience: 10 to 15 years of experience required in IT leadership and/or technical roles, preferably in a multi-national or regional context. 5+ Years experience in a similar role or function. Experience in the LATAM region is highly desirable.
• Skills:
• Strong leadership and management skills
• Deep understanding of IT infrastructure technologies (e.g., networking, cloud computing, cybersecurity)
• Knowledge of Information Security best practices and regulations
• Excellent communication, interpersonal, and presentation skills
• Strong analytical and problem-solving skills
• IT Risk Management
• Data Governance
• IT Governance Frameworks & Standards (e.g. ITIL, CoBIT, ISO27k)