IT Security Manager

We are looking for an IT Security Manager for our partner HayPass who is responsible for leading the cybersecurity engineering team and overseeing the design, deployment, and continuous improvement of security systems across HayPass’s on‑premises and virtualized environments. This role combines technical depth with strong leadership, ensuring that cybersecurity operations, incident response, security architecture, and compliance initiatives are executed with excellence.

​

HayPass is the company which entered into public private partnership with the Armenian Government to implement the new biometric ID management infrastructure and ID card project.

HayPass will then operate the infrastructure and deliver ID Services to the Citizen of Armenia (on

behalf of the Ministry of Internal Affairs) for the next 11 years.

​

Core Responsibilities

Leadership & Team Management  

• Lead, mentor, and grow a team of cybersecurity engineers, fostering a high-performance and security‑first culture.  

• Define team structure, roles, and skills needed to support the organization’s expanding security landscape.  

• Oversee workload distribution, performance reviews, and professional development plans.  

Security Architecture & Strategy  

• Develop and maintain cybersecurity architecture aligned with national-level security standards and regulatory expectations.  

• Oversee the design and implementation of secure networks, virtualization, and system architectures.  

• Evaluate new technologies, tools, and frameworks to enhance cybersecurity capabilities.  

Security Operations Oversight  

• Supervise vulnerability management, threat monitoring, incident response, and forensic analysis processes.  

• Ensure regular review of VM snapshots, templates, access controls, firewall rules, IDS/IPS alerts, and endpoint protection systems.  

• Oversee implementation of automation and scripting (Python, Bash, PowerShell) to improve security efficiency.  

Compliance & Governance  

• Ensure adherence to frameworks such as ISO 27001, NIST, CIS, and GDPR.  

• Coordinate internal and external audits; provide documentation, reports, and remediation actions.  

• Maintain and enforce internal security policies, standards, and operational procedures.  

Cross-Functional Collaboration  

• Work closely with IT and Compliance teams to ensure system hardening and secure service delivery.  

• Support government and regulatory partners with security reporting and assessments.  

• Contribute to secure design reviews for new services and infrastructure changes.  

Incident Response & Risk Management  

• Lead response to major security incidents, coordinating technical teams and communicating with leadership.  

• Build and continuously improve incident response plans, playbooks, and escalation procedures.  

• Identify and mitigate potential risks across the infrastructure and operational workflows.  

​​

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, IT, or related field.  

• 7–10+ years of experience in cybersecurity, including 3+ years in a leadership or management role.  

• Hands-on expertise in:   

• SIEM platforms (ELK, Splunk, QRadar)  

• Endpoint protection and EDR solutions  

• Vulnerability management tools (Tenable, Qualys, Cyberwatch)  

• Network security (TCP/IP, firewalls, VPNs, IDS/IPS)  

• Virtualization security (VMware vSphere/ESXi, Hyper-V)  

• Strong understanding of secure system architecture and infrastructure security.  

• Experience leading incident response and penetration testing initiatives.  

• Knowledge of regulatory frameworks (GDPR, ISO 27001, NIST, CIS).  

• Security certifications preferred: CISSP, CISM, CEH, OSCP, Security+.  

​

Generic Skills & Qualifications

• Strong leadership, coaching, and stakeholder management skills.   

• Excellent troubleshooting and analytical thinking.   

• High attention to detail and accuracy.   

• Strong communication and documentation abilities in Armenian and English.   

• Customer-focused mindset and ability to work cross-functionally.   

• Adaptability and resilience in a dynamic environment.   

• Results-oriented, proactive, and capable of working independently.